Case-sensitive excludedSubtrees name constraints cause Auth Bypass in crypto/x509

Unexpected work during chain building in crypto/x509

Inefficient policy validation in crypto/x509

Incorrect enforcement of email constraints in crypto/x509

Excessive resource consumption when printing error string for host certificate validation in crypto/x509

Panic when validating certificates with DSA public keys in crypto/x509

Quadratic complexity when checking name constraints in crypto/x509

Usage of ExtKeyUsageAny disables policy validation in crypto/x509

ParsePKCS1PrivateKey panic with partial keys in crypto/x509

Inefficient candidate hostname parsing in crypto/x509

Improper application of excluded DNS name constraints when verifying wildcard names in crypto/x509

Usage of IPv6 zone IDs can bypass URI name constraints in crypto/x509

Panic in name constraint checking for malformed certificates in crypto/x509

Distrust compromised intermediate certificates in crypto/x509