{"id":"GO-2021-0140","details":"X509 Certificate verification does not validate KeyUsages EKU\nrequirements on Windows if VerifyOptions.Roots is nil.\n","modified":"2022-05-23T18:04:20Z","published":"2022-01-04T18:11:08Z","withdrawn":"2024-05-15T05:37:10.981937Z","references":[{"type":"FIX","url":"https://go.dev/cl/242597"},{"type":"FIX","url":"https://go.googlesource.com/go/+/82175e699a2e2cd83d3aa34949e9b922d66d52f5"},{"type":"WEB","url":"https://go.dev/issue/39360"},{"type":"WEB","url":"https://groups.google.com/g/golang-announce/c/XZNfaiwgt2w"}],"affected":[{"package":{"name":"crypto/x509","ecosystem":"Go","purl":"pkg:golang/crypto/x509"},"ranges":[{"type":"SEMVER","events":[{"introduced":"0"},{"fixed":"1.13.13"},{"introduced":"1.14.0"},{"fixed":"1.14.5"}]}],"ecosystem_specific":{"goos":["windows"],"symbols":["Certificate.Verify"]},"database_specific":{"source":"https://vuln.go.dev/ID/GO-2021-0140.json","url":"https://pkg.go.dev/vuln/GO-2021-0140"}}],"schema_version":"1.7.3"}