Go will refuse certificate chains through a set of distrusted intermediates (github.com)
The fix, tracked as CVE-2026-111943, filters out chains containing the distrusted intermediates; backports were opened for Go 1.26 and 1.27.
Sign in to save
Tag
CVE-2026-111943
1 stories