GHSA-mpwr-8vm7-h73f: Input Validation
Decode, DecodeChain, DecodeTrustStore, and ToPEM can incorrectly accept PKCS#12 files which were encoded with the wrong password, due to a failure to reject excessively-short PBMAC1 keys. Users who decode PKCS#12 files from untrusted sources and rely on the password for authentication can be tricked into accepting malicious PKCS#12 files. Users who only decode PKCS#12 files from trusted sources are not affected.
Thanks to Pavol Žáčik (Red Hat) and Alex Gaynor (Anthropic) for finding and reporting the same issue in OpenSSL (CVE-2026-34181).
Affected Software
Remediation
Recommended actions to resolve this vulnerability, in priority order.
- Upgrade
Upgrade
go/software.sslmate.com/src/go-pkcs12to a version that resolves this vulnerability.Fixed in 0.7.2
Event History
Frequently Asked Questions
What is the severity of GHSA-mpwr-8vm7-h73f?
The severity of GHSA-mpwr-8vm7-h73f is rated at 37, indicating a significant risk.
How do I fix GHSA-mpwr-8vm7-h73f?
To fix GHSA-mpwr-8vm7-h73f, ensure that you validate the integrity of PKCS#12 files and avoid decoding files from untrusted sources.
What vulnerabilities are associated with GHSA-mpwr-8vm7-h73f?
GHSA-mpwr-8vm7-h73f is associated with improper validation of PBMAC1 keys in PKCS#12 files.
What are the implications of GHSA-mpwr-8vm7-h73f?
The implications of GHSA-mpwr-8vm7-h73f include potential unauthorized access if untrusted PKCS#12 files are decoded using incorrect passwords.
What components are affected by GHSA-mpwr-8vm7-h73f?
GHSA-mpwr-8vm7-h73f affects the Decode, DecodeChain, and DecodeTrustStore functions in the go-pkcs12 library.