Golang Crypto vulnerabilities

• golang crypto, golang.org/x/crypto golang.org/x/crypto/ssh +1 more Prevent DoS on deadlocked undecided channel in golang.org/x/crypto/ssh CVE-2026-78662 Fix available 7.5 HighSeptember 2, 2026
• golang crypto, golang.org/x/crypto golang.org/x/crypto/ssh +1 more Prevent DoS on deadlocked established channel in golang.org/x/crypto/ssh CVE-2026-56855 Fix available 7.5 HighSeptember 2, 2026
• golang crypto, golang.org/x/crypto golang.org/x/crypto/ssh/agent +1 more Invoking pathological inputs can lead to client panic in golang.org/x/crypto/ssh/agent CVE-2026-46598 Fix available 5.3 MediumMay 22, 2026
• golang crypto, golang.org/x/crypto golang.org/x/crypto/ssh +1 more Invoking byte arithmetic causes underflow and panic in golang.org/x/crypto/ssh CVE-2026-46597 Fix available 7.5 HighMay 22, 2026
• golang crypto, golang.org/x/crypto golang.org/x/crypto/ssh, red hat assisted installer for red hat openshift container platform 2 +54 more +56 more Invoking VerifiedPublicKeyCallback permissions skip enforcement in golang.org/x/crypto/ssh CVE-2026-46595 Public exploitFix available 10.0 CriticalMay 22, 2026
• golang crypto, golang.org/x/crypto golang.org/x/crypto/ssh/knownhosts, red hat assisted installer for red hat openshift container platform 2 +53 more +55 more Invoking auth bypass via unenforced @revoked status in golang.org/x/crypto/ssh/knownhosts CVE-2026-42508 Fix available 9.1 CriticalMay 22, 2026
• golang crypto, golang.org/x/crypto golang.org/x/crypto/ssh, red hat assisted installer for red hat openshift container platform 2 +62 more +64 more Invoking server panic during CheckHostKey/Authenticate in golang.org/x/crypto/ssh CVE-2026-39835 Fix available 5.3 MediumMay 22, 2026
• golang crypto, golang.org/x/crypto golang.org/x/crypto/ssh +1 more Invoking infinite loop on large channel writes in golang.org/x/crypto/ssh CVE-2026-39834 Fix available 9.1 CriticalMay 22, 2026
• golang crypto, golang.org/x/crypto golang.org/x/crypto/ssh/agent +1 more Invoking key constraints not enforced in golang.org/x/crypto/ssh/agent CVE-2026-39833 Fix available 9.1 CriticalMay 22, 2026
• golang crypto, golang.org/x/crypto golang.org/x/crypto/ssh/agent, red hat assisted installer for red hat openshift container platform 2 +46 more +48 more Invoking agent constraints dropped when forwarding keys in golang.org/x/crypto/ssh/agent CVE-2026-39832 Fix available 9.1 CriticalMay 22, 2026
• golang crypto, golang.org/x/crypto golang.org/x/crypto/ssh +1 more Invoking bypass of FIDO/U2F security keys physical interaction in golang.org/x/crypto/ssh CVE-2026-39831 Fix available 9.1 CriticalMay 22, 2026
• golang crypto, golang.org/x/crypto golang.org/x/crypto/ssh, red hat assisted installer for red hat openshift container platform 2 +68 more +70 more Invoking client can cause server deadlock on unexpected responses in golang.org/x/crypto/ssh CVE-2026-39830 Fix available 9.1 CriticalMay 22, 2026
• golang crypto, golang.org/x/crypto golang.org/x/crypto/ssh, red hat assisted installer for red hat openshift container platform 2 +74 more +76 more Invoking pathological RSA/DSA parameters may cause DoS in golang.org/x/crypto/ssh CVE-2026-39829 Fix available 7.5 HighMay 22, 2026
• golang crypto, golang.org/x/crypto golang.org/x/crypto/ssh, red hat assisted installer for red hat openshift container platform 2 +64 more +66 more Invoking bypass of certificate restrictions in golang.org/x/crypto/ssh CVE-2026-39828 Fix available 6.3 MediumMay 22, 2026
• golang crypto, golang.org/x/crypto golang.org/x/crypto/ssh +1 more Invoking memory leak when rejecting channels can lead to DoS in golang.org/x/crypto/ssh CVE-2026-39827 Fix available 6.5 MediumMay 22, 2026
• golang crypto, golang.org/x/crypto golang.org/x/crypto/ssh +1 more Unbounded memory consumption in golang.org/x/crypto/ssh CVE-2025-58181 Fix available 5.3 MediumNovember 19, 2025
• golang crypto, golang.org/x/crypto golang.org/x/crypto/ssh/agent +1 more Malformed constraint may cause denial of service in golang.org/x/crypto/ssh/agent CVE-2025-47914 Fix available 5.3 MediumNovember 19, 2025
• golang crypto, golang.org/x/crypto golang.org/x/crypto/acme/autocert +1 more Limited directory traversal vulnerability on Windows in golang.org/x/crypto CVE-2022-30636 Fix available 7.5 HighJuly 2, 2024
• 9bis kitty, apache sshd, sshj +68 more +70 more Prefix Truncation Attack against ChaCha20-Poly1305 and Encrypt-then-MAC aka Terrapin CVE-2023-48795 Public exploitFix available EPSS 93.5% 5.9 MediumDecember 18, 2023
• golang crypto, debian linux +1 more Golang/x/crypto message forgery vulnerability CVE-2019-11841 Fix available 5.9 MediumMay 22, 2019
• golang crypto, debian linux +1 more golang.org/x/crypto/salsa20/salsa uses insufficiently random values CVE-2019-11840 Fix available 5.9 MediumMay 9, 2019
• go ssh library, golang crypto +1 more golang.org/x/crypto/ssh Man-in-the-Middle attack CVE-2017-3204 Fix available 8.1 HighApril 4, 2017