CVE-2022-23806

CVE-2022-23806 is a critical vulnerability affecting Go versions before 1.16.14 and 1.17.x before 1.17.7, specifically within the crypto/elliptic Curve.IsOnCurve function, which can incorrectly validate field elements. With a CVSS score of 9.1, this vulnerability poses a high risk due to its network-based attack vector, low attack complexity, and potential for high integrity and availability impacts. There is currently no evidence of active exploitation, public exploit code, or significant community discussion surrounding this CVE.