CVE-2026-34073: X509 Dns Constraint Inner Name Bypasscve-2026-34073-x509-dns-constraint-inner-name-bypass
DNSPattern provides an inner_name() method which strips wildcard prefixes. Using the inner domain name for name constraint matching allows wildcard certificates to bypass excluded subtree constraints.