TI-2026-26182 CVE-2026-33810 · GHSA-fv83-x2xw-2j55
Case-sensitive excludedSubtrees name constraints cause Auth Bypass in crypto/x509
Priority MEDIUM 42
When verifying a certificate chain containing excluded DNS constraints, these constraints are not correctly applied to wildcard DNS SANs which use a different case than the constraint.