Skip to contentGolang.org/x/crypto Golang.org/x/crypto/ssh vulnerabilities
- golang crypto, golang.org/x/crypto golang.org/x/crypto/ssh +1 morePrevent DoS on deadlocked undecided channel in golang.org/x/crypto/sshCVE-2026-78662Fix available7.5 High
- golang crypto, golang.org/x/crypto golang.org/x/crypto/ssh +1 morePrevent DoS on deadlocked established channel in golang.org/x/crypto/sshCVE-2026-56855Fix available7.5 High
- golang.org/x/crypto golang.org/x/crypto/sshSource-address critical option not enforced for non-public-key auth callbacks in golang.org/x/crypto/sshCVE-2026-56854Fix available7.5 High
- golang crypto, golang.org/x/crypto golang.org/x/crypto/ssh/agent +1 moreInvoking pathological inputs can lead to client panic in golang.org/x/crypto/ssh/agentCVE-2026-46598Fix available5.3 Medium
- golang crypto, golang.org/x/crypto golang.org/x/crypto/ssh +1 moreInvoking byte arithmetic causes underflow and panic in golang.org/x/crypto/sshCVE-2026-46597Fix available7.5 High
- golang crypto, golang.org/x/crypto golang.org/x/crypto/ssh, red hat assisted installer for red hat openshift container platform 2 +54 more +56 moreInvoking VerifiedPublicKeyCallback permissions skip enforcement in golang.org/x/crypto/sshCVE-2026-46595Public exploitFix available10.0 Critical
- golang crypto, golang.org/x/crypto golang.org/x/crypto/ssh/knownhosts, red hat assisted installer for red hat openshift container platform 2 +53 more +55 moreInvoking auth bypass via unenforced @revoked status in golang.org/x/crypto/ssh/knownhostsCVE-2026-42508Fix available9.1 Critical
- golang crypto, golang.org/x/crypto golang.org/x/crypto/ssh, red hat assisted installer for red hat openshift container platform 2 +62 more +64 moreInvoking server panic during CheckHostKey/Authenticate in golang.org/x/crypto/sshCVE-2026-39835Fix available5.3 Medium
- golang crypto, golang.org/x/crypto golang.org/x/crypto/ssh +1 moreInvoking infinite loop on large channel writes in golang.org/x/crypto/sshCVE-2026-39834Fix available9.1 Critical
- golang crypto, golang.org/x/crypto golang.org/x/crypto/ssh/agent +1 moreInvoking key constraints not enforced in golang.org/x/crypto/ssh/agentCVE-2026-39833Fix available9.1 Critical
- golang crypto, golang.org/x/crypto golang.org/x/crypto/ssh/agent, red hat assisted installer for red hat openshift container platform 2 +46 more +48 moreInvoking agent constraints dropped when forwarding keys in golang.org/x/crypto/ssh/agentCVE-2026-39832Fix available9.1 Critical
- golang crypto, golang.org/x/crypto golang.org/x/crypto/ssh +1 moreInvoking bypass of FIDO/U2F security keys physical interaction in golang.org/x/crypto/sshCVE-2026-39831Fix available9.1 Critical
- golang crypto, golang.org/x/crypto golang.org/x/crypto/ssh, red hat assisted installer for red hat openshift container platform 2 +68 more +70 moreInvoking client can cause server deadlock on unexpected responses in golang.org/x/crypto/sshCVE-2026-39830Fix available9.1 Critical
- golang crypto, golang.org/x/crypto golang.org/x/crypto/ssh, red hat assisted installer for red hat openshift container platform 2 +74 more +76 moreInvoking pathological RSA/DSA parameters may cause DoS in golang.org/x/crypto/sshCVE-2026-39829Fix available7.5 High
- golang crypto, golang.org/x/crypto golang.org/x/crypto/ssh, red hat assisted installer for red hat openshift container platform 2 +64 more +66 moreInvoking bypass of certificate restrictions in golang.org/x/crypto/sshCVE-2026-39828Fix available6.3 Medium
- golang crypto, golang.org/x/crypto golang.org/x/crypto/ssh +1 moreInvoking memory leak when rejecting channels can lead to DoS in golang.org/x/crypto/sshCVE-2026-39827Fix available6.5 Medium
- golang crypto, golang.org/x/crypto golang.org/x/crypto/ssh +1 moreUnbounded memory consumption in golang.org/x/crypto/sshCVE-2025-58181Fix available5.3 Medium
- golang crypto, golang.org/x/crypto golang.org/x/crypto/ssh/agent +1 moreMalformed constraint may cause denial of service in golang.org/x/crypto/ssh/agentCVE-2025-47914Fix available5.3 Medium
- go ssh, golang.org/x/crypto golang.org/x/crypto/ssh/agent +1 morePotential denial of service in golang.org/x/crypto/ssh/agentCVE-2025-47913Fix available7.5 High
- go ssh, golang.org/x/crypto golang.org/x/crypto/ssh +1 morePotential denial of service in golang.org/x/cryptoCVE-2025-22869Fix available7.5 High
- golang.org/x/crypto golang.org/x/crypto/sshMisuse of connection.serverAuthenticate may cause authorization bypass in golang.org/x/cryptoCVE-2024-45337Public exploitFix available9.1 Critical