The policy validation algorithm is unintentionally quadratic, because the prune operation is accidentally hoisted into a for loop, when it instead should only be called once.
This can be used to force the chain builder to do extra work, but since an attack against this would require convincing a trusted CA to issue a certificate with an extremely large number of invalid policies, we don't consider this a seriously risk.
This is a PUBLIC track issue per the Go Security policy and CVE-2026-32281.
The policy validation algorithm is unintentionally quadratic, because the prune operation is accidentally hoisted into a for loop, when it instead should only be called once.
This can be used to force the chain builder to do extra work, but since an attack against this would require convincing a trusted CA to issue a certificate with an extremely large number of invalid policies, we don't consider this a seriously risk.
This is a PUBLIC track issue per the Go Security policy and CVE-2026-32281.