{"id":"GHSA-mpwr-8vm7-h73f","title":"package pkcs12: Authentication bypass in Decode functions","summary":"package pkcs12: Authentication bypass in Decode functions","severity":"medium","cwe":["CWE-20"],"vendor":"src","product":"software.sslmate.com/src/go-pkcs12","ecosystem":"go","affected":["software.sslmate.com/src/go-pkcs12 >= 0.6.0, < 0.7.2"],"patched":["software.sslmate.com/src/go-pkcs12 0.7.2"],"published":"2026-08-17","updated":"2026-08-17","source":"GHSA","sourceUrl":"https://github.com/advisories/GHSA-mpwr-8vm7-h73f","references":[{"url":"https://github.com/SSLMate/go-pkcs12/security/advisories/GHSA-mpwr-8vm7-h73f"},{"url":"https://openssl-library.org/news/vulnerabilities/#CVE-2026-34181"},{"url":"https://github.com/advisories/GHSA-mpwr-8vm7-h73f"}],"tags":["ghsa","go"],"ingestedAt":"2026-08-17T22:01:16.855Z","slug":"GHSA-mpwr-8vm7-h73f","body":"## Overview\n\n`Decode`, `DecodeChain`, `DecodeTrustStore`, and `ToPEM` can incorrectly accept PKCS#12 files which were encoded with the wrong password, due to a failure to reject excessively-short PBMAC1 keys. Users who decode PKCS#12 files from untrusted sources and rely on the password for authentication can be tricked into accepting malicious PKCS#12 files. Users who only decode PKCS#12 files from trusted sources are not affected.\n\nThanks to Pavol Žáčik (Red Hat) and Alex Gaynor (Anthropic) for finding and reporting the same issue in OpenSSL ([CVE-2026-34181](https://openssl-library.org/news/vulnerabilities/#CVE-2026-34181)).\n\n## Affected packages\n\n- `software.sslmate.com/src/go-pkcs12 >= 0.6.0, < 0.7.2`\n\n## Remediation\n\nUpgrade to a patched release:\n\n- `software.sslmate.com/src/go-pkcs12 0.7.2`","depth":"sunlit","depthScore":28,"depthScoreParts":{"impact":27.5,"likelihood":0,"exploitation":0,"ransomware":0},"changes":[]}