url.Parse insufficiently validated the host/authority component and accepted some invalid URLs.
CVSS Score
7.5
EPSS Score
0.007
Published
2026-03-06
An excluded subdomain constraint in a certificate chain does not restrict the usage of wildcard SANs in the leaf certificate. For example a constraint that excludes the subdomain test.example.com does not prevent a leaf certificate from claiming the SAN *.example.com.
CVSS Score
6.5
EPSS Score
0.003
Published
2025-12-03
Page 3