CVE-2025-58188

Validating certificate chains which contain DSA public keys can cause programs to panic, due to a interface cast that assumes they implement the Equal method. This affects programs which validate arbitrary certificate chains.

  • Published Oct 29, 2025
  • CVSS 7.5 high
  • 0.4% chance of exploitation in the next 30 days (EPSS)
  • A fix is available

Affected software

In the news

CVE-2025-58188 at the National Vulnerability Database