CVE-2026-27137 is a high-severity vulnerability in the Go programming language. The vulnerability occurs when verifying a certificate chain containing multiple email address constraints with common local portions but different domain portions. In such cases, the constraints are not properly applied, and only the last constraint is considered. This vulnerability has a CVSS score of 7.5 and a HIGH severity [truncated]
CVE-2025-61732 is a high severity vulnerability in Go, with a CVSS score of 8.6. The vulnerability allows for code smuggling into the resulting cgo binary due to a discrepancy between how Go and C/C++ comments were parsed. This issue was published on February 5, 2026, and last modified on June 30, 2026. The CVE record and NVD detail pages provide more information on this vulnerability. A patch is availabl [truncated]
