Non-linear Input Parsing Vulnerability in Go Programming Language

CVE-2025-61723

What is CVE-2025-61723?

A vulnerability exists within the Go programming language that impacts the handling of untrusted PEM inputs. Specifically, the processing time required for parsing invalid inputs demonstrates a non-linear growth relative to input size, which can lead to performance degradation and potential denial-of-service conditions in applications relying on this parsing functionality. It is crucial for developers to be aware of this issue and implement appropriate measures to mitigate its effects.

References