crypto

Oct 9, 2026 GO-2026-5932

  GO-2026-5932: The golang.org/x/crypto/openpgp package is unmaintained, unsafe by design, and has known security issues

Sep 8, 2026 GO-2026-5932

  GO-2026-5932: The golang.org/x/crypto/openpgp package is unmaintained, unsafe by design, and has known security issues

Sep 2, 2026 GO-2026-5932

  GO-2026-5932: The golang.org/x/crypto/openpgp package is unmaintained, unsafe by design, and has known security issues

Aug 11, 2026 GO-2026-5932 +2 more

  GO-2026-5932: The golang.org/x/crypto/openpgp package is unmaintained, unsafe by design, and has known security issues

  GO-2026-6354: Prevent DoS on deadlocked undecided channel in golang.org/x/crypto/ssh

  GO-2026-6355: Prevent DoS on deadlocked established channel in golang.org/x/crypto/ssh

Jul 8, 2026 GO-2026-5932 +3 more

  GO-2026-5932: The golang.org/x/crypto/openpgp package is unmaintained, unsafe by design, and has known security issues

  GO-2026-6303: Source-address critical option not enforced for non-public-key auth callbacks in golang.org/x/crypto/ssh

  GO-2026-6354: Prevent DoS on deadlocked undecided channel in golang.org/x/crypto/ssh

  GO-2026-6355: Prevent DoS on deadlocked established channel in golang.org/x/crypto/ssh

Jun 8, 2026 GO-2026-5932 +3 more

  GO-2026-5932: The golang.org/x/crypto/openpgp package is unmaintained, unsafe by design, and has known security issues

  GO-2026-6303: Source-address critical option not enforced for non-public-key auth callbacks in golang.org/x/crypto/ssh

  GO-2026-6354: Prevent DoS on deadlocked undecided channel in golang.org/x/crypto/ssh

  GO-2026-6355: Prevent DoS on deadlocked established channel in golang.org/x/crypto/ssh

May 22, 2026 GO-2026-5932 +3 more

  GO-2026-5932: The golang.org/x/crypto/openpgp package is unmaintained, unsafe by design, and has known security issues

  GO-2026-6303: Source-address critical option not enforced for non-public-key auth callbacks in golang.org/x/crypto/ssh

  GO-2026-6354: Prevent DoS on deadlocked undecided channel in golang.org/x/crypto/ssh

  GO-2026-6355: Prevent DoS on deadlocked established channel in golang.org/x/crypto/ssh

May 8, 2026 GO-2026-5005 +16 more

  GO-2026-5005: Invoking key constraints not enforced in golang.org/x/crypto/ssh/agent

  GO-2026-5006: Invoking agent constraints dropped when forwarding keys in golang.org/x/crypto/ssh/agent

  GO-2026-5013: Invoking byte arithmetic causes underflow and panic in golang.org/x/crypto/ssh

  GO-2026-5014: Invoking bypass of certificate restrictions in golang.org/x/crypto/ssh

  GO-2026-5015: Invoking server panic during CheckHostKey/Authenticate in golang.org/x/crypto/ssh

  GO-2026-5016: Invoking memory leak when rejecting channels can lead to DoS in golang.org/x/crypto/ssh

  GO-2026-5017: Invoking client can cause server deadlock on unexpected responses in golang.org/x/crypto/ssh

  GO-2026-5018: Invoking pathological RSA/DSA parameters may cause DoS in golang.org/x/crypto/ssh

  GO-2026-5019: Invoking bypass of FIDO/U2F security keys physical interaction in golang.org/x/crypto/ssh

  GO-2026-5020: Invoking infinite loop on large channel writes in golang.org/x/crypto/ssh

  GO-2026-5021: Invoking auth bypass via unenforced @revoked status in golang.org/x/crypto/ssh/knownhosts

  GO-2026-5023: Invoking VerifiedPublicKeyCallback permissions skip enforcement in golang.org/x/crypto/ssh

  GO-2026-5033: Invoking pathological inputs can lead to client panic in golang.org/x/crypto/ssh/agent

  GO-2026-5932: The golang.org/x/crypto/openpgp package is unmaintained, unsafe by design, and has known security issues

  GO-2026-6303: Source-address critical option not enforced for non-public-key auth callbacks in golang.org/x/crypto/ssh

  GO-2026-6354: Prevent DoS on deadlocked undecided channel in golang.org/x/crypto/ssh

  GO-2026-6355: Prevent DoS on deadlocked established channel in golang.org/x/crypto/ssh

Apr 9, 2026 GO-2026-5005 +16 more

  GO-2026-5005: Invoking key constraints not enforced in golang.org/x/crypto/ssh/agent

  GO-2026-5006: Invoking agent constraints dropped when forwarding keys in golang.org/x/crypto/ssh/agent

  GO-2026-5013: Invoking byte arithmetic causes underflow and panic in golang.org/x/crypto/ssh

  GO-2026-5014: Invoking bypass of certificate restrictions in golang.org/x/crypto/ssh

  GO-2026-5015: Invoking server panic during CheckHostKey/Authenticate in golang.org/x/crypto/ssh

  GO-2026-5016: Invoking memory leak when rejecting channels can lead to DoS in golang.org/x/crypto/ssh

  GO-2026-5017: Invoking client can cause server deadlock on unexpected responses in golang.org/x/crypto/ssh

  GO-2026-5018: Invoking pathological RSA/DSA parameters may cause DoS in golang.org/x/crypto/ssh

  GO-2026-5019: Invoking bypass of FIDO/U2F security keys physical interaction in golang.org/x/crypto/ssh

  GO-2026-5020: Invoking infinite loop on large channel writes in golang.org/x/crypto/ssh

  GO-2026-5021: Invoking auth bypass via unenforced @revoked status in golang.org/x/crypto/ssh/knownhosts

  GO-2026-5023: Invoking VerifiedPublicKeyCallback permissions skip enforcement in golang.org/x/crypto/ssh

  GO-2026-5033: Invoking pathological inputs can lead to client panic in golang.org/x/crypto/ssh/agent

  GO-2026-5932: The golang.org/x/crypto/openpgp package is unmaintained, unsafe by design, and has known security issues

  GO-2026-6303: Source-address critical option not enforced for non-public-key auth callbacks in golang.org/x/crypto/ssh

  GO-2026-6354: Prevent DoS on deadlocked undecided channel in golang.org/x/crypto/ssh

  GO-2026-6355: Prevent DoS on deadlocked established channel in golang.org/x/crypto/ssh

Mar 11, 2026 GO-2026-5005 +16 more

  GO-2026-5005: Invoking key constraints not enforced in golang.org/x/crypto/ssh/agent

  GO-2026-5006: Invoking agent constraints dropped when forwarding keys in golang.org/x/crypto/ssh/agent

  GO-2026-5013: Invoking byte arithmetic causes underflow and panic in golang.org/x/crypto/ssh

  GO-2026-5014: Invoking bypass of certificate restrictions in golang.org/x/crypto/ssh

  GO-2026-5015: Invoking server panic during CheckHostKey/Authenticate in golang.org/x/crypto/ssh

  GO-2026-5016: Invoking memory leak when rejecting channels can lead to DoS in golang.org/x/crypto/ssh

  GO-2026-5017: Invoking client can cause server deadlock on unexpected responses in golang.org/x/crypto/ssh

  GO-2026-5018: Invoking pathological RSA/DSA parameters may cause DoS in golang.org/x/crypto/ssh

  GO-2026-5019: Invoking bypass of FIDO/U2F security keys physical interaction in golang.org/x/crypto/ssh

  GO-2026-5020: Invoking infinite loop on large channel writes in golang.org/x/crypto/ssh

  GO-2026-5021: Invoking auth bypass via unenforced @revoked status in golang.org/x/crypto/ssh/knownhosts

  GO-2026-5023: Invoking VerifiedPublicKeyCallback permissions skip enforcement in golang.org/x/crypto/ssh

  GO-2026-5033: Invoking pathological inputs can lead to client panic in golang.org/x/crypto/ssh/agent

  GO-2026-5932: The golang.org/x/crypto/openpgp package is unmaintained, unsafe by design, and has known security issues

  GO-2026-6303: Source-address critical option not enforced for non-public-key auth callbacks in golang.org/x/crypto/ssh

  GO-2026-6354: Prevent DoS on deadlocked undecided channel in golang.org/x/crypto/ssh

  GO-2026-6355: Prevent DoS on deadlocked established channel in golang.org/x/crypto/ssh

Feb 9, 2026 GO-2026-5005 +16 more

  GO-2026-5005: Invoking key constraints not enforced in golang.org/x/crypto/ssh/agent

  GO-2026-5006: Invoking agent constraints dropped when forwarding keys in golang.org/x/crypto/ssh/agent

  GO-2026-5013: Invoking byte arithmetic causes underflow and panic in golang.org/x/crypto/ssh

  GO-2026-5014: Invoking bypass of certificate restrictions in golang.org/x/crypto/ssh

  GO-2026-5015: Invoking server panic during CheckHostKey/Authenticate in golang.org/x/crypto/ssh

  GO-2026-5016: Invoking memory leak when rejecting channels can lead to DoS in golang.org/x/crypto/ssh

  GO-2026-5017: Invoking client can cause server deadlock on unexpected responses in golang.org/x/crypto/ssh

  GO-2026-5018: Invoking pathological RSA/DSA parameters may cause DoS in golang.org/x/crypto/ssh

  GO-2026-5019: Invoking bypass of FIDO/U2F security keys physical interaction in golang.org/x/crypto/ssh

  GO-2026-5020: Invoking infinite loop on large channel writes in golang.org/x/crypto/ssh

  GO-2026-5021: Invoking auth bypass via unenforced @revoked status in golang.org/x/crypto/ssh/knownhosts

  GO-2026-5023: Invoking VerifiedPublicKeyCallback permissions skip enforcement in golang.org/x/crypto/ssh

  GO-2026-5033: Invoking pathological inputs can lead to client panic in golang.org/x/crypto/ssh/agent

  GO-2026-5932: The golang.org/x/crypto/openpgp package is unmaintained, unsafe by design, and has known security issues

  GO-2026-6303: Source-address critical option not enforced for non-public-key auth callbacks in golang.org/x/crypto/ssh

  GO-2026-6354: Prevent DoS on deadlocked undecided channel in golang.org/x/crypto/ssh

  GO-2026-6355: Prevent DoS on deadlocked established channel in golang.org/x/crypto/ssh

Jan 12, 2026 GO-2026-5005 +16 more

  GO-2026-5005: Invoking key constraints not enforced in golang.org/x/crypto/ssh/agent

  GO-2026-5006: Invoking agent constraints dropped when forwarding keys in golang.org/x/crypto/ssh/agent

  GO-2026-5013: Invoking byte arithmetic causes underflow and panic in golang.org/x/crypto/ssh

  GO-2026-5014: Invoking bypass of certificate restrictions in golang.org/x/crypto/ssh

  GO-2026-5015: Invoking server panic during CheckHostKey/Authenticate in golang.org/x/crypto/ssh

  GO-2026-5016: Invoking memory leak when rejecting channels can lead to DoS in golang.org/x/crypto/ssh

  GO-2026-5017: Invoking client can cause server deadlock on unexpected responses in golang.org/x/crypto/ssh

  GO-2026-5018: Invoking pathological RSA/DSA parameters may cause DoS in golang.org/x/crypto/ssh

  GO-2026-5019: Invoking bypass of FIDO/U2F security keys physical interaction in golang.org/x/crypto/ssh

  GO-2026-5020: Invoking infinite loop on large channel writes in golang.org/x/crypto/ssh

  GO-2026-5021: Invoking auth bypass via unenforced @revoked status in golang.org/x/crypto/ssh/knownhosts

  GO-2026-5023: Invoking VerifiedPublicKeyCallback permissions skip enforcement in golang.org/x/crypto/ssh

  GO-2026-5033: Invoking pathological inputs can lead to client panic in golang.org/x/crypto/ssh/agent

  GO-2026-5932: The golang.org/x/crypto/openpgp package is unmaintained, unsafe by design, and has known security issues

  GO-2026-6303: Source-address critical option not enforced for non-public-key auth callbacks in golang.org/x/crypto/ssh

  GO-2026-6354: Prevent DoS on deadlocked undecided channel in golang.org/x/crypto/ssh

  GO-2026-6355: Prevent DoS on deadlocked established channel in golang.org/x/crypto/ssh

Dec 8, 2025 GO-2026-5005 +16 more

  GO-2026-5005: Invoking key constraints not enforced in golang.org/x/crypto/ssh/agent

  GO-2026-5006: Invoking agent constraints dropped when forwarding keys in golang.org/x/crypto/ssh/agent

  GO-2026-5013: Invoking byte arithmetic causes underflow and panic in golang.org/x/crypto/ssh

  GO-2026-5014: Invoking bypass of certificate restrictions in golang.org/x/crypto/ssh

  GO-2026-5015: Invoking server panic during CheckHostKey/Authenticate in golang.org/x/crypto/ssh

  GO-2026-5016: Invoking memory leak when rejecting channels can lead to DoS in golang.org/x/crypto/ssh

  GO-2026-5017: Invoking client can cause server deadlock on unexpected responses in golang.org/x/crypto/ssh

  GO-2026-5018: Invoking pathological RSA/DSA parameters may cause DoS in golang.org/x/crypto/ssh

  GO-2026-5019: Invoking bypass of FIDO/U2F security keys physical interaction in golang.org/x/crypto/ssh

  GO-2026-5020: Invoking infinite loop on large channel writes in golang.org/x/crypto/ssh

  GO-2026-5021: Invoking auth bypass via unenforced @revoked status in golang.org/x/crypto/ssh/knownhosts

  GO-2026-5023: Invoking VerifiedPublicKeyCallback permissions skip enforcement in golang.org/x/crypto/ssh

  GO-2026-5033: Invoking pathological inputs can lead to client panic in golang.org/x/crypto/ssh/agent

  GO-2026-5932: The golang.org/x/crypto/openpgp package is unmaintained, unsafe by design, and has known security issues

  GO-2026-6303: Source-address critical option not enforced for non-public-key auth callbacks in golang.org/x/crypto/ssh

  GO-2026-6354: Prevent DoS on deadlocked undecided channel in golang.org/x/crypto/ssh

  GO-2026-6355: Prevent DoS on deadlocked established channel in golang.org/x/crypto/ssh

Nov 19, 2025 GO-2026-5005 +16 more

  GO-2026-5005: Invoking key constraints not enforced in golang.org/x/crypto/ssh/agent

  GO-2026-5006: Invoking agent constraints dropped when forwarding keys in golang.org/x/crypto/ssh/agent

  GO-2026-5013: Invoking byte arithmetic causes underflow and panic in golang.org/x/crypto/ssh

  GO-2026-5014: Invoking bypass of certificate restrictions in golang.org/x/crypto/ssh

  GO-2026-5015: Invoking server panic during CheckHostKey/Authenticate in golang.org/x/crypto/ssh

  GO-2026-5016: Invoking memory leak when rejecting channels can lead to DoS in golang.org/x/crypto/ssh

  GO-2026-5017: Invoking client can cause server deadlock on unexpected responses in golang.org/x/crypto/ssh

  GO-2026-5018: Invoking pathological RSA/DSA parameters may cause DoS in golang.org/x/crypto/ssh

  GO-2026-5019: Invoking bypass of FIDO/U2F security keys physical interaction in golang.org/x/crypto/ssh

  GO-2026-5020: Invoking infinite loop on large channel writes in golang.org/x/crypto/ssh

  GO-2026-5021: Invoking auth bypass via unenforced @revoked status in golang.org/x/crypto/ssh/knownhosts

  GO-2026-5023: Invoking VerifiedPublicKeyCallback permissions skip enforcement in golang.org/x/crypto/ssh

  GO-2026-5033: Invoking pathological inputs can lead to client panic in golang.org/x/crypto/ssh/agent

  GO-2026-5932: The golang.org/x/crypto/openpgp package is unmaintained, unsafe by design, and has known security issues

  GO-2026-6303: Source-address critical option not enforced for non-public-key auth callbacks in golang.org/x/crypto/ssh

  GO-2026-6354: Prevent DoS on deadlocked undecided channel in golang.org/x/crypto/ssh

  GO-2026-6355: Prevent DoS on deadlocked established channel in golang.org/x/crypto/ssh

Nov 11, 2025 GO-2025-4134 +18 more

  GO-2025-4134: Unbounded memory consumption in golang.org/x/crypto/ssh

  GO-2025-4135: Malformed constraint may cause denial of service in golang.org/x/crypto/ssh/agent

  GO-2026-5005: Invoking key constraints not enforced in golang.org/x/crypto/ssh/agent

  GO-2026-5006: Invoking agent constraints dropped when forwarding keys in golang.org/x/crypto/ssh/agent

  GO-2026-5013: Invoking byte arithmetic causes underflow and panic in golang.org/x/crypto/ssh

  GO-2026-5014: Invoking bypass of certificate restrictions in golang.org/x/crypto/ssh

  GO-2026-5015: Invoking server panic during CheckHostKey/Authenticate in golang.org/x/crypto/ssh

  GO-2026-5016: Invoking memory leak when rejecting channels can lead to DoS in golang.org/x/crypto/ssh

  GO-2026-5017: Invoking client can cause server deadlock on unexpected responses in golang.org/x/crypto/ssh

  GO-2026-5018: Invoking pathological RSA/DSA parameters may cause DoS in golang.org/x/crypto/ssh

  GO-2026-5019: Invoking bypass of FIDO/U2F security keys physical interaction in golang.org/x/crypto/ssh

  GO-2026-5020: Invoking infinite loop on large channel writes in golang.org/x/crypto/ssh

  GO-2026-5021: Invoking auth bypass via unenforced @revoked status in golang.org/x/crypto/ssh/knownhosts

  GO-2026-5023: Invoking VerifiedPublicKeyCallback permissions skip enforcement in golang.org/x/crypto/ssh

  GO-2026-5033: Invoking pathological inputs can lead to client panic in golang.org/x/crypto/ssh/agent

  GO-2026-5932: The golang.org/x/crypto/openpgp package is unmaintained, unsafe by design, and has known security issues

  GO-2026-6303: Source-address critical option not enforced for non-public-key auth callbacks in golang.org/x/crypto/ssh

  GO-2026-6354: Prevent DoS on deadlocked undecided channel in golang.org/x/crypto/ssh

  GO-2026-6355: Prevent DoS on deadlocked established channel in golang.org/x/crypto/ssh

Oct 8, 2025 GO-2025-4134 +18 more

  GO-2025-4134: Unbounded memory consumption in golang.org/x/crypto/ssh

  GO-2025-4135: Malformed constraint may cause denial of service in golang.org/x/crypto/ssh/agent

  GO-2026-5005: Invoking key constraints not enforced in golang.org/x/crypto/ssh/agent

  GO-2026-5006: Invoking agent constraints dropped when forwarding keys in golang.org/x/crypto/ssh/agent

  GO-2026-5013: Invoking byte arithmetic causes underflow and panic in golang.org/x/crypto/ssh

  GO-2026-5014: Invoking bypass of certificate restrictions in golang.org/x/crypto/ssh

  GO-2026-5015: Invoking server panic during CheckHostKey/Authenticate in golang.org/x/crypto/ssh

  GO-2026-5016: Invoking memory leak when rejecting channels can lead to DoS in golang.org/x/crypto/ssh

  GO-2026-5017: Invoking client can cause server deadlock on unexpected responses in golang.org/x/crypto/ssh

  GO-2026-5018: Invoking pathological RSA/DSA parameters may cause DoS in golang.org/x/crypto/ssh

  GO-2026-5019: Invoking bypass of FIDO/U2F security keys physical interaction in golang.org/x/crypto/ssh

  GO-2026-5020: Invoking infinite loop on large channel writes in golang.org/x/crypto/ssh

  GO-2026-5021: Invoking auth bypass via unenforced @revoked status in golang.org/x/crypto/ssh/knownhosts

  GO-2026-5023: Invoking VerifiedPublicKeyCallback permissions skip enforcement in golang.org/x/crypto/ssh

  GO-2026-5033: Invoking pathological inputs can lead to client panic in golang.org/x/crypto/ssh/agent

  GO-2026-5932: The golang.org/x/crypto/openpgp package is unmaintained, unsafe by design, and has known security issues

  GO-2026-6303: Source-address critical option not enforced for non-public-key auth callbacks in golang.org/x/crypto/ssh

  GO-2026-6354: Prevent DoS on deadlocked undecided channel in golang.org/x/crypto/ssh

  GO-2026-6355: Prevent DoS on deadlocked established channel in golang.org/x/crypto/ssh

Sep 8, 2025 GO-2025-4116 +19 more

  GO-2025-4116: Potential denial of service in golang.org/x/crypto/ssh/agent

  GO-2025-4134: Unbounded memory consumption in golang.org/x/crypto/ssh

  GO-2025-4135: Malformed constraint may cause denial of service in golang.org/x/crypto/ssh/agent

  GO-2026-5005: Invoking key constraints not enforced in golang.org/x/crypto/ssh/agent

  GO-2026-5006: Invoking agent constraints dropped when forwarding keys in golang.org/x/crypto/ssh/agent

  GO-2026-5013: Invoking byte arithmetic causes underflow and panic in golang.org/x/crypto/ssh

  GO-2026-5014: Invoking bypass of certificate restrictions in golang.org/x/crypto/ssh

  GO-2026-5015: Invoking server panic during CheckHostKey/Authenticate in golang.org/x/crypto/ssh

  GO-2026-5016: Invoking memory leak when rejecting channels can lead to DoS in golang.org/x/crypto/ssh

  GO-2026-5017: Invoking client can cause server deadlock on unexpected responses in golang.org/x/crypto/ssh

  GO-2026-5018: Invoking pathological RSA/DSA parameters may cause DoS in golang.org/x/crypto/ssh

  GO-2026-5019: Invoking bypass of FIDO/U2F security keys physical interaction in golang.org/x/crypto/ssh

  GO-2026-5020: Invoking infinite loop on large channel writes in golang.org/x/crypto/ssh

  GO-2026-5021: Invoking auth bypass via unenforced @revoked status in golang.org/x/crypto/ssh/knownhosts

  GO-2026-5023: Invoking VerifiedPublicKeyCallback permissions skip enforcement in golang.org/x/crypto/ssh

  GO-2026-5033: Invoking pathological inputs can lead to client panic in golang.org/x/crypto/ssh/agent

  GO-2026-5932: The golang.org/x/crypto/openpgp package is unmaintained, unsafe by design, and has known security issues

  GO-2026-6303: Source-address critical option not enforced for non-public-key auth callbacks in golang.org/x/crypto/ssh

  GO-2026-6354: Prevent DoS on deadlocked undecided channel in golang.org/x/crypto/ssh

  GO-2026-6355: Prevent DoS on deadlocked established channel in golang.org/x/crypto/ssh

Aug 7, 2025 GO-2025-4116 +19 more

  GO-2025-4116: Potential denial of service in golang.org/x/crypto/ssh/agent

  GO-2025-4134: Unbounded memory consumption in golang.org/x/crypto/ssh

  GO-2025-4135: Malformed constraint may cause denial of service in golang.org/x/crypto/ssh/agent

  GO-2026-5005: Invoking key constraints not enforced in golang.org/x/crypto/ssh/agent

  GO-2026-5006: Invoking agent constraints dropped when forwarding keys in golang.org/x/crypto/ssh/agent

  GO-2026-5013: Invoking byte arithmetic causes underflow and panic in golang.org/x/crypto/ssh

  GO-2026-5014: Invoking bypass of certificate restrictions in golang.org/x/crypto/ssh

  GO-2026-5015: Invoking server panic during CheckHostKey/Authenticate in golang.org/x/crypto/ssh

  GO-2026-5016: Invoking memory leak when rejecting channels can lead to DoS in golang.org/x/crypto/ssh

  GO-2026-5017: Invoking client can cause server deadlock on unexpected responses in golang.org/x/crypto/ssh

  GO-2026-5018: Invoking pathological RSA/DSA parameters may cause DoS in golang.org/x/crypto/ssh

  GO-2026-5019: Invoking bypass of FIDO/U2F security keys physical interaction in golang.org/x/crypto/ssh

  GO-2026-5020: Invoking infinite loop on large channel writes in golang.org/x/crypto/ssh

  GO-2026-5021: Invoking auth bypass via unenforced @revoked status in golang.org/x/crypto/ssh/knownhosts

  GO-2026-5023: Invoking VerifiedPublicKeyCallback permissions skip enforcement in golang.org/x/crypto/ssh

  GO-2026-5033: Invoking pathological inputs can lead to client panic in golang.org/x/crypto/ssh/agent

  GO-2026-5932: The golang.org/x/crypto/openpgp package is unmaintained, unsafe by design, and has known security issues

  GO-2026-6303: Source-address critical option not enforced for non-public-key auth callbacks in golang.org/x/crypto/ssh

  GO-2026-6354: Prevent DoS on deadlocked undecided channel in golang.org/x/crypto/ssh

  GO-2026-6355: Prevent DoS on deadlocked established channel in golang.org/x/crypto/ssh

Jul 10, 2025 GO-2025-4116 +19 more

  GO-2025-4116: Potential denial of service in golang.org/x/crypto/ssh/agent

  GO-2025-4134: Unbounded memory consumption in golang.org/x/crypto/ssh

  GO-2025-4135: Malformed constraint may cause denial of service in golang.org/x/crypto/ssh/agent

  GO-2026-5005: Invoking key constraints not enforced in golang.org/x/crypto/ssh/agent

  GO-2026-5006: Invoking agent constraints dropped when forwarding keys in golang.org/x/crypto/ssh/agent

  GO-2026-5013: Invoking byte arithmetic causes underflow and panic in golang.org/x/crypto/ssh

  GO-2026-5014: Invoking bypass of certificate restrictions in golang.org/x/crypto/ssh

  GO-2026-5015: Invoking server panic during CheckHostKey/Authenticate in golang.org/x/crypto/ssh

  GO-2026-5016: Invoking memory leak when rejecting channels can lead to DoS in golang.org/x/crypto/ssh

  GO-2026-5017: Invoking client can cause server deadlock on unexpected responses in golang.org/x/crypto/ssh

  GO-2026-5018: Invoking pathological RSA/DSA parameters may cause DoS in golang.org/x/crypto/ssh

  GO-2026-5019: Invoking bypass of FIDO/U2F security keys physical interaction in golang.org/x/crypto/ssh

  GO-2026-5020: Invoking infinite loop on large channel writes in golang.org/x/crypto/ssh

  GO-2026-5021: Invoking auth bypass via unenforced @revoked status in golang.org/x/crypto/ssh/knownhosts

  GO-2026-5023: Invoking VerifiedPublicKeyCallback permissions skip enforcement in golang.org/x/crypto/ssh

  GO-2026-5033: Invoking pathological inputs can lead to client panic in golang.org/x/crypto/ssh/agent

  GO-2026-5932: The golang.org/x/crypto/openpgp package is unmaintained, unsafe by design, and has known security issues

  GO-2026-6303: Source-address critical option not enforced for non-public-key auth callbacks in golang.org/x/crypto/ssh

  GO-2026-6354: Prevent DoS on deadlocked undecided channel in golang.org/x/crypto/ssh

  GO-2026-6355: Prevent DoS on deadlocked established channel in golang.org/x/crypto/ssh

Jun 5, 2025 GO-2025-4116 +19 more

  GO-2025-4116: Potential denial of service in golang.org/x/crypto/ssh/agent

  GO-2025-4134: Unbounded memory consumption in golang.org/x/crypto/ssh

  GO-2025-4135: Malformed constraint may cause denial of service in golang.org/x/crypto/ssh/agent

  GO-2026-5005: Invoking key constraints not enforced in golang.org/x/crypto/ssh/agent

  GO-2026-5006: Invoking agent constraints dropped when forwarding keys in golang.org/x/crypto/ssh/agent

  GO-2026-5013: Invoking byte arithmetic causes underflow and panic in golang.org/x/crypto/ssh

  GO-2026-5014: Invoking bypass of certificate restrictions in golang.org/x/crypto/ssh

  GO-2026-5015: Invoking server panic during CheckHostKey/Authenticate in golang.org/x/crypto/ssh

  GO-2026-5016: Invoking memory leak when rejecting channels can lead to DoS in golang.org/x/crypto/ssh

  GO-2026-5017: Invoking client can cause server deadlock on unexpected responses in golang.org/x/crypto/ssh

  GO-2026-5018: Invoking pathological RSA/DSA parameters may cause DoS in golang.org/x/crypto/ssh

  GO-2026-5019: Invoking bypass of FIDO/U2F security keys physical interaction in golang.org/x/crypto/ssh

  GO-2026-5020: Invoking infinite loop on large channel writes in golang.org/x/crypto/ssh

  GO-2026-5021: Invoking auth bypass via unenforced @revoked status in golang.org/x/crypto/ssh/knownhosts

  GO-2026-5023: Invoking VerifiedPublicKeyCallback permissions skip enforcement in golang.org/x/crypto/ssh

  GO-2026-5033: Invoking pathological inputs can lead to client panic in golang.org/x/crypto/ssh/agent

  GO-2026-5932: The golang.org/x/crypto/openpgp package is unmaintained, unsafe by design, and has known security issues

  GO-2026-6303: Source-address critical option not enforced for non-public-key auth callbacks in golang.org/x/crypto/ssh

  GO-2026-6354: Prevent DoS on deadlocked undecided channel in golang.org/x/crypto/ssh

  GO-2026-6355: Prevent DoS on deadlocked established channel in golang.org/x/crypto/ssh

May 5, 2025 GO-2025-4116 +19 more

  GO-2025-4116: Potential denial of service in golang.org/x/crypto/ssh/agent

  GO-2025-4134: Unbounded memory consumption in golang.org/x/crypto/ssh

  GO-2025-4135: Malformed constraint may cause denial of service in golang.org/x/crypto/ssh/agent

  GO-2026-5005: Invoking key constraints not enforced in golang.org/x/crypto/ssh/agent

  GO-2026-5006: Invoking agent constraints dropped when forwarding keys in golang.org/x/crypto/ssh/agent

  GO-2026-5013: Invoking byte arithmetic causes underflow and panic in golang.org/x/crypto/ssh

  GO-2026-5014: Invoking bypass of certificate restrictions in golang.org/x/crypto/ssh

  GO-2026-5015: Invoking server panic during CheckHostKey/Authenticate in golang.org/x/crypto/ssh

  GO-2026-5016: Invoking memory leak when rejecting channels can lead to DoS in golang.org/x/crypto/ssh

  GO-2026-5017: Invoking client can cause server deadlock on unexpected responses in golang.org/x/crypto/ssh

  GO-2026-5018: Invoking pathological RSA/DSA parameters may cause DoS in golang.org/x/crypto/ssh

  GO-2026-5019: Invoking bypass of FIDO/U2F security keys physical interaction in golang.org/x/crypto/ssh

  GO-2026-5020: Invoking infinite loop on large channel writes in golang.org/x/crypto/ssh

  GO-2026-5021: Invoking auth bypass via unenforced @revoked status in golang.org/x/crypto/ssh/knownhosts

  GO-2026-5023: Invoking VerifiedPublicKeyCallback permissions skip enforcement in golang.org/x/crypto/ssh

  GO-2026-5033: Invoking pathological inputs can lead to client panic in golang.org/x/crypto/ssh/agent

  GO-2026-5932: The golang.org/x/crypto/openpgp package is unmaintained, unsafe by design, and has known security issues

  GO-2026-6303: Source-address critical option not enforced for non-public-key auth callbacks in golang.org/x/crypto/ssh

  GO-2026-6354: Prevent DoS on deadlocked undecided channel in golang.org/x/crypto/ssh

  GO-2026-6355: Prevent DoS on deadlocked established channel in golang.org/x/crypto/ssh

Apr 6, 2025 GO-2025-4116 +19 more

  GO-2025-4116: Potential denial of service in golang.org/x/crypto/ssh/agent

  GO-2025-4134: Unbounded memory consumption in golang.org/x/crypto/ssh

  GO-2025-4135: Malformed constraint may cause denial of service in golang.org/x/crypto/ssh/agent

  GO-2026-5005: Invoking key constraints not enforced in golang.org/x/crypto/ssh/agent

  GO-2026-5006: Invoking agent constraints dropped when forwarding keys in golang.org/x/crypto/ssh/agent

  GO-2026-5013: Invoking byte arithmetic causes underflow and panic in golang.org/x/crypto/ssh

  GO-2026-5014: Invoking bypass of certificate restrictions in golang.org/x/crypto/ssh

  GO-2026-5015: Invoking server panic during CheckHostKey/Authenticate in golang.org/x/crypto/ssh

  GO-2026-5016: Invoking memory leak when rejecting channels can lead to DoS in golang.org/x/crypto/ssh

  GO-2026-5017: Invoking client can cause server deadlock on unexpected responses in golang.org/x/crypto/ssh

  GO-2026-5018: Invoking pathological RSA/DSA parameters may cause DoS in golang.org/x/crypto/ssh

  GO-2026-5019: Invoking bypass of FIDO/U2F security keys physical interaction in golang.org/x/crypto/ssh

  GO-2026-5020: Invoking infinite loop on large channel writes in golang.org/x/crypto/ssh

  GO-2026-5021: Invoking auth bypass via unenforced @revoked status in golang.org/x/crypto/ssh/knownhosts

  GO-2026-5023: Invoking VerifiedPublicKeyCallback permissions skip enforcement in golang.org/x/crypto/ssh

  GO-2026-5033: Invoking pathological inputs can lead to client panic in golang.org/x/crypto/ssh/agent

  GO-2026-5932: The golang.org/x/crypto/openpgp package is unmaintained, unsafe by design, and has known security issues

  GO-2026-6303: Source-address critical option not enforced for non-public-key auth callbacks in golang.org/x/crypto/ssh

  GO-2026-6354: Prevent DoS on deadlocked undecided channel in golang.org/x/crypto/ssh

  GO-2026-6355: Prevent DoS on deadlocked established channel in golang.org/x/crypto/ssh

Mar 5, 2025 GO-2025-4116 +19 more

  GO-2025-4116: Potential denial of service in golang.org/x/crypto/ssh/agent

  GO-2025-4134: Unbounded memory consumption in golang.org/x/crypto/ssh

  GO-2025-4135: Malformed constraint may cause denial of service in golang.org/x/crypto/ssh/agent

  GO-2026-5005: Invoking key constraints not enforced in golang.org/x/crypto/ssh/agent

  GO-2026-5006: Invoking agent constraints dropped when forwarding keys in golang.org/x/crypto/ssh/agent

  GO-2026-5013: Invoking byte arithmetic causes underflow and panic in golang.org/x/crypto/ssh

  GO-2026-5014: Invoking bypass of certificate restrictions in golang.org/x/crypto/ssh

  GO-2026-5015: Invoking server panic during CheckHostKey/Authenticate in golang.org/x/crypto/ssh

  GO-2026-5016: Invoking memory leak when rejecting channels can lead to DoS in golang.org/x/crypto/ssh

  GO-2026-5017: Invoking client can cause server deadlock on unexpected responses in golang.org/x/crypto/ssh

  GO-2026-5018: Invoking pathological RSA/DSA parameters may cause DoS in golang.org/x/crypto/ssh

  GO-2026-5019: Invoking bypass of FIDO/U2F security keys physical interaction in golang.org/x/crypto/ssh

  GO-2026-5020: Invoking infinite loop on large channel writes in golang.org/x/crypto/ssh

  GO-2026-5021: Invoking auth bypass via unenforced @revoked status in golang.org/x/crypto/ssh/knownhosts

  GO-2026-5023: Invoking VerifiedPublicKeyCallback permissions skip enforcement in golang.org/x/crypto/ssh

  GO-2026-5033: Invoking pathological inputs can lead to client panic in golang.org/x/crypto/ssh/agent

  GO-2026-5932: The golang.org/x/crypto/openpgp package is unmaintained, unsafe by design, and has known security issues

  GO-2026-6303: Source-address critical option not enforced for non-public-key auth callbacks in golang.org/x/crypto/ssh

  GO-2026-6354: Prevent DoS on deadlocked undecided channel in golang.org/x/crypto/ssh

  GO-2026-6355: Prevent DoS on deadlocked established channel in golang.org/x/crypto/ssh

Feb 24, 2025 GO-2025-4116 +19 more

  GO-2025-4116: Potential denial of service in golang.org/x/crypto/ssh/agent

  GO-2025-4134: Unbounded memory consumption in golang.org/x/crypto/ssh

  GO-2025-4135: Malformed constraint may cause denial of service in golang.org/x/crypto/ssh/agent

  GO-2026-5005: Invoking key constraints not enforced in golang.org/x/crypto/ssh/agent

  GO-2026-5006: Invoking agent constraints dropped when forwarding keys in golang.org/x/crypto/ssh/agent

  GO-2026-5013: Invoking byte arithmetic causes underflow and panic in golang.org/x/crypto/ssh

  GO-2026-5014: Invoking bypass of certificate restrictions in golang.org/x/crypto/ssh

  GO-2026-5015: Invoking server panic during CheckHostKey/Authenticate in golang.org/x/crypto/ssh

  GO-2026-5016: Invoking memory leak when rejecting channels can lead to DoS in golang.org/x/crypto/ssh

  GO-2026-5017: Invoking client can cause server deadlock on unexpected responses in golang.org/x/crypto/ssh

  GO-2026-5018: Invoking pathological RSA/DSA parameters may cause DoS in golang.org/x/crypto/ssh

  GO-2026-5019: Invoking bypass of FIDO/U2F security keys physical interaction in golang.org/x/crypto/ssh

  GO-2026-5020: Invoking infinite loop on large channel writes in golang.org/x/crypto/ssh

  GO-2026-5021: Invoking auth bypass via unenforced @revoked status in golang.org/x/crypto/ssh/knownhosts

  GO-2026-5023: Invoking VerifiedPublicKeyCallback permissions skip enforcement in golang.org/x/crypto/ssh

  GO-2026-5033: Invoking pathological inputs can lead to client panic in golang.org/x/crypto/ssh/agent

  GO-2026-5932: The golang.org/x/crypto/openpgp package is unmaintained, unsafe by design, and has known security issues

  GO-2026-6303: Source-address critical option not enforced for non-public-key auth callbacks in golang.org/x/crypto/ssh

  GO-2026-6354: Prevent DoS on deadlocked undecided channel in golang.org/x/crypto/ssh

  GO-2026-6355: Prevent DoS on deadlocked established channel in golang.org/x/crypto/ssh

Feb 22, 2025 GO-2025-3487 +20 more

  GO-2025-3487: Potential denial of service in golang.org/x/crypto

  GO-2025-4116: Potential denial of service in golang.org/x/crypto/ssh/agent

  GO-2025-4134: Unbounded memory consumption in golang.org/x/crypto/ssh

  GO-2025-4135: Malformed constraint may cause denial of service in golang.org/x/crypto/ssh/agent

  GO-2026-5005: Invoking key constraints not enforced in golang.org/x/crypto/ssh/agent

  GO-2026-5006: Invoking agent constraints dropped when forwarding keys in golang.org/x/crypto/ssh/agent

  GO-2026-5013: Invoking byte arithmetic causes underflow and panic in golang.org/x/crypto/ssh

  GO-2026-5014: Invoking bypass of certificate restrictions in golang.org/x/crypto/ssh

  GO-2026-5015: Invoking server panic during CheckHostKey/Authenticate in golang.org/x/crypto/ssh

  GO-2026-5016: Invoking memory leak when rejecting channels can lead to DoS in golang.org/x/crypto/ssh

  GO-2026-5017: Invoking client can cause server deadlock on unexpected responses in golang.org/x/crypto/ssh

  GO-2026-5018: Invoking pathological RSA/DSA parameters may cause DoS in golang.org/x/crypto/ssh

  GO-2026-5019: Invoking bypass of FIDO/U2F security keys physical interaction in golang.org/x/crypto/ssh

  GO-2026-5020: Invoking infinite loop on large channel writes in golang.org/x/crypto/ssh

  GO-2026-5021: Invoking auth bypass via unenforced @revoked status in golang.org/x/crypto/ssh/knownhosts

  GO-2026-5023: Invoking VerifiedPublicKeyCallback permissions skip enforcement in golang.org/x/crypto/ssh

  GO-2026-5033: Invoking pathological inputs can lead to client panic in golang.org/x/crypto/ssh/agent

  GO-2026-5932: The golang.org/x/crypto/openpgp package is unmaintained, unsafe by design, and has known security issues

  GO-2026-6303: Source-address critical option not enforced for non-public-key auth callbacks in golang.org/x/crypto/ssh

  GO-2026-6354: Prevent DoS on deadlocked undecided channel in golang.org/x/crypto/ssh

  GO-2026-6355: Prevent DoS on deadlocked established channel in golang.org/x/crypto/ssh

Feb 4, 2025 GO-2025-3487 +20 more

  GO-2025-3487: Potential denial of service in golang.org/x/crypto

  GO-2025-4116: Potential denial of service in golang.org/x/crypto/ssh/agent

  GO-2025-4134: Unbounded memory consumption in golang.org/x/crypto/ssh

  GO-2025-4135: Malformed constraint may cause denial of service in golang.org/x/crypto/ssh/agent

  GO-2026-5005: Invoking key constraints not enforced in golang.org/x/crypto/ssh/agent

  GO-2026-5006: Invoking agent constraints dropped when forwarding keys in golang.org/x/crypto/ssh/agent

  GO-2026-5013: Invoking byte arithmetic causes underflow and panic in golang.org/x/crypto/ssh

  GO-2026-5014: Invoking bypass of certificate restrictions in golang.org/x/crypto/ssh

  GO-2026-5015: Invoking server panic during CheckHostKey/Authenticate in golang.org/x/crypto/ssh

  GO-2026-5016: Invoking memory leak when rejecting channels can lead to DoS in golang.org/x/crypto/ssh

  GO-2026-5017: Invoking client can cause server deadlock on unexpected responses in golang.org/x/crypto/ssh

  GO-2026-5018: Invoking pathological RSA/DSA parameters may cause DoS in golang.org/x/crypto/ssh

  GO-2026-5019: Invoking bypass of FIDO/U2F security keys physical interaction in golang.org/x/crypto/ssh

  GO-2026-5020: Invoking infinite loop on large channel writes in golang.org/x/crypto/ssh

  GO-2026-5021: Invoking auth bypass via unenforced @revoked status in golang.org/x/crypto/ssh/knownhosts

  GO-2026-5023: Invoking VerifiedPublicKeyCallback permissions skip enforcement in golang.org/x/crypto/ssh

  GO-2026-5033: Invoking pathological inputs can lead to client panic in golang.org/x/crypto/ssh/agent

  GO-2026-5932: The golang.org/x/crypto/openpgp package is unmaintained, unsafe by design, and has known security issues

  GO-2026-6303: Source-address critical option not enforced for non-public-key auth callbacks in golang.org/x/crypto/ssh

  GO-2026-6354: Prevent DoS on deadlocked undecided channel in golang.org/x/crypto/ssh

  GO-2026-6355: Prevent DoS on deadlocked established channel in golang.org/x/crypto/ssh

Jan 6, 2025 GO-2025-3487 +20 more

  GO-2025-3487: Potential denial of service in golang.org/x/crypto

  GO-2025-4116: Potential denial of service in golang.org/x/crypto/ssh/agent

  GO-2025-4134: Unbounded memory consumption in golang.org/x/crypto/ssh

  GO-2025-4135: Malformed constraint may cause denial of service in golang.org/x/crypto/ssh/agent

  GO-2026-5005: Invoking key constraints not enforced in golang.org/x/crypto/ssh/agent

  GO-2026-5006: Invoking agent constraints dropped when forwarding keys in golang.org/x/crypto/ssh/agent

  GO-2026-5013: Invoking byte arithmetic causes underflow and panic in golang.org/x/crypto/ssh

  GO-2026-5014: Invoking bypass of certificate restrictions in golang.org/x/crypto/ssh

  GO-2026-5015: Invoking server panic during CheckHostKey/Authenticate in golang.org/x/crypto/ssh

  GO-2026-5016: Invoking memory leak when rejecting channels can lead to DoS in golang.org/x/crypto/ssh

  GO-2026-5017: Invoking client can cause server deadlock on unexpected responses in golang.org/x/crypto/ssh

  GO-2026-5018: Invoking pathological RSA/DSA parameters may cause DoS in golang.org/x/crypto/ssh

  GO-2026-5019: Invoking bypass of FIDO/U2F security keys physical interaction in golang.org/x/crypto/ssh

  GO-2026-5020: Invoking infinite loop on large channel writes in golang.org/x/crypto/ssh

  GO-2026-5021: Invoking auth bypass via unenforced @revoked status in golang.org/x/crypto/ssh/knownhosts

  GO-2026-5023: Invoking VerifiedPublicKeyCallback permissions skip enforcement in golang.org/x/crypto/ssh

  GO-2026-5033: Invoking pathological inputs can lead to client panic in golang.org/x/crypto/ssh/agent

  GO-2026-5932: The golang.org/x/crypto/openpgp package is unmaintained, unsafe by design, and has known security issues

  GO-2026-6303: Source-address critical option not enforced for non-public-key auth callbacks in golang.org/x/crypto/ssh

  GO-2026-6354: Prevent DoS on deadlocked undecided channel in golang.org/x/crypto/ssh

  GO-2026-6355: Prevent DoS on deadlocked established channel in golang.org/x/crypto/ssh

Dec 11, 2024 GO-2025-3487 +20 more

  GO-2025-3487: Potential denial of service in golang.org/x/crypto

  GO-2025-4116: Potential denial of service in golang.org/x/crypto/ssh/agent

  GO-2025-4134: Unbounded memory consumption in golang.org/x/crypto/ssh

  GO-2025-4135: Malformed constraint may cause denial of service in golang.org/x/crypto/ssh/agent

  GO-2026-5005: Invoking key constraints not enforced in golang.org/x/crypto/ssh/agent

  GO-2026-5006: Invoking agent constraints dropped when forwarding keys in golang.org/x/crypto/ssh/agent

  GO-2026-5013: Invoking byte arithmetic causes underflow and panic in golang.org/x/crypto/ssh

  GO-2026-5014: Invoking bypass of certificate restrictions in golang.org/x/crypto/ssh

  GO-2026-5015: Invoking server panic during CheckHostKey/Authenticate in golang.org/x/crypto/ssh

  GO-2026-5016: Invoking memory leak when rejecting channels can lead to DoS in golang.org/x/crypto/ssh

  GO-2026-5017: Invoking client can cause server deadlock on unexpected responses in golang.org/x/crypto/ssh

  GO-2026-5018: Invoking pathological RSA/DSA parameters may cause DoS in golang.org/x/crypto/ssh

  GO-2026-5019: Invoking bypass of FIDO/U2F security keys physical interaction in golang.org/x/crypto/ssh

  GO-2026-5020: Invoking infinite loop on large channel writes in golang.org/x/crypto/ssh

  GO-2026-5021: Invoking auth bypass via unenforced @revoked status in golang.org/x/crypto/ssh/knownhosts

  GO-2026-5023: Invoking VerifiedPublicKeyCallback permissions skip enforcement in golang.org/x/crypto/ssh

  GO-2026-5033: Invoking pathological inputs can lead to client panic in golang.org/x/crypto/ssh/agent

  GO-2026-5932: The golang.org/x/crypto/openpgp package is unmaintained, unsafe by design, and has known security issues

  GO-2026-6303: Source-address critical option not enforced for non-public-key auth callbacks in golang.org/x/crypto/ssh

  GO-2026-6354: Prevent DoS on deadlocked undecided channel in golang.org/x/crypto/ssh

  GO-2026-6355: Prevent DoS on deadlocked established channel in golang.org/x/crypto/ssh

Dec 4, 2024 GO-2024-3321 +21 more

  GO-2024-3321: Misuse of connection.serverAuthenticate may cause authorization bypass in golang.org/x/crypto

  GO-2025-3487: Potential denial of service in golang.org/x/crypto

  GO-2025-4116: Potential denial of service in golang.org/x/crypto/ssh/agent

  GO-2025-4134: Unbounded memory consumption in golang.org/x/crypto/ssh

  GO-2025-4135: Malformed constraint may cause denial of service in golang.org/x/crypto/ssh/agent

  GO-2026-5005: Invoking key constraints not enforced in golang.org/x/crypto/ssh/agent

  GO-2026-5006: Invoking agent constraints dropped when forwarding keys in golang.org/x/crypto/ssh/agent

  GO-2026-5013: Invoking byte arithmetic causes underflow and panic in golang.org/x/crypto/ssh

  GO-2026-5014: Invoking bypass of certificate restrictions in golang.org/x/crypto/ssh

  GO-2026-5015: Invoking server panic during CheckHostKey/Authenticate in golang.org/x/crypto/ssh

  GO-2026-5016: Invoking memory leak when rejecting channels can lead to DoS in golang.org/x/crypto/ssh

  GO-2026-5017: Invoking client can cause server deadlock on unexpected responses in golang.org/x/crypto/ssh

  GO-2026-5018: Invoking pathological RSA/DSA parameters may cause DoS in golang.org/x/crypto/ssh

  GO-2026-5019: Invoking bypass of FIDO/U2F security keys physical interaction in golang.org/x/crypto/ssh

  GO-2026-5020: Invoking infinite loop on large channel writes in golang.org/x/crypto/ssh

  GO-2026-5021: Invoking auth bypass via unenforced @revoked status in golang.org/x/crypto/ssh/knownhosts

  GO-2026-5023: Invoking VerifiedPublicKeyCallback permissions skip enforcement in golang.org/x/crypto/ssh

  GO-2026-5033: Invoking pathological inputs can lead to client panic in golang.org/x/crypto/ssh/agent

  GO-2026-5932: The golang.org/x/crypto/openpgp package is unmaintained, unsafe by design, and has known security issues

  GO-2026-6303: Source-address critical option not enforced for non-public-key auth callbacks in golang.org/x/crypto/ssh

  GO-2026-6354: Prevent DoS on deadlocked undecided channel in golang.org/x/crypto/ssh

  GO-2026-6355: Prevent DoS on deadlocked established channel in golang.org/x/crypto/ssh

Nov 7, 2024 GO-2024-3321 +21 more

  GO-2024-3321: Misuse of connection.serverAuthenticate may cause authorization bypass in golang.org/x/crypto

  GO-2025-3487: Potential denial of service in golang.org/x/crypto

  GO-2025-4116: Potential denial of service in golang.org/x/crypto/ssh/agent

  GO-2025-4134: Unbounded memory consumption in golang.org/x/crypto/ssh

  GO-2025-4135: Malformed constraint may cause denial of service in golang.org/x/crypto/ssh/agent

  GO-2026-5005: Invoking key constraints not enforced in golang.org/x/crypto/ssh/agent

  GO-2026-5006: Invoking agent constraints dropped when forwarding keys in golang.org/x/crypto/ssh/agent

  GO-2026-5013: Invoking byte arithmetic causes underflow and panic in golang.org/x/crypto/ssh

  GO-2026-5014: Invoking bypass of certificate restrictions in golang.org/x/crypto/ssh

  GO-2026-5015: Invoking server panic during CheckHostKey/Authenticate in golang.org/x/crypto/ssh

  GO-2026-5016: Invoking memory leak when rejecting channels can lead to DoS in golang.org/x/crypto/ssh

  GO-2026-5017: Invoking client can cause server deadlock on unexpected responses in golang.org/x/crypto/ssh

  GO-2026-5018: Invoking pathological RSA/DSA parameters may cause DoS in golang.org/x/crypto/ssh

  GO-2026-5019: Invoking bypass of FIDO/U2F security keys physical interaction in golang.org/x/crypto/ssh

  GO-2026-5020: Invoking infinite loop on large channel writes in golang.org/x/crypto/ssh

  GO-2026-5021: Invoking auth bypass via unenforced @revoked status in golang.org/x/crypto/ssh/knownhosts

  GO-2026-5023: Invoking VerifiedPublicKeyCallback permissions skip enforcement in golang.org/x/crypto/ssh

  GO-2026-5033: Invoking pathological inputs can lead to client panic in golang.org/x/crypto/ssh/agent

  GO-2026-5932: The golang.org/x/crypto/openpgp package is unmaintained, unsafe by design, and has known security issues

  GO-2026-6303: Source-address critical option not enforced for non-public-key auth callbacks in golang.org/x/crypto/ssh

  GO-2026-6354: Prevent DoS on deadlocked undecided channel in golang.org/x/crypto/ssh

  GO-2026-6355: Prevent DoS on deadlocked established channel in golang.org/x/crypto/ssh

Oct 4, 2024 GO-2024-3321 +21 more

  GO-2024-3321: Misuse of connection.serverAuthenticate may cause authorization bypass in golang.org/x/crypto

  GO-2025-3487: Potential denial of service in golang.org/x/crypto

  GO-2025-4116: Potential denial of service in golang.org/x/crypto/ssh/agent

  GO-2025-4134: Unbounded memory consumption in golang.org/x/crypto/ssh

  GO-2025-4135: Malformed constraint may cause denial of service in golang.org/x/crypto/ssh/agent

  GO-2026-5005: Invoking key constraints not enforced in golang.org/x/crypto/ssh/agent

  GO-2026-5006: Invoking agent constraints dropped when forwarding keys in golang.org/x/crypto/ssh/agent

  GO-2026-5013: Invoking byte arithmetic causes underflow and panic in golang.org/x/crypto/ssh

  GO-2026-5014: Invoking bypass of certificate restrictions in golang.org/x/crypto/ssh

  GO-2026-5015: Invoking server panic during CheckHostKey/Authenticate in golang.org/x/crypto/ssh

  GO-2026-5016: Invoking memory leak when rejecting channels can lead to DoS in golang.org/x/crypto/ssh

  GO-2026-5017: Invoking client can cause server deadlock on unexpected responses in golang.org/x/crypto/ssh

  GO-2026-5018: Invoking pathological RSA/DSA parameters may cause DoS in golang.org/x/crypto/ssh

  GO-2026-5019: Invoking bypass of FIDO/U2F security keys physical interaction in golang.org/x/crypto/ssh

  GO-2026-5020: Invoking infinite loop on large channel writes in golang.org/x/crypto/ssh

  GO-2026-5021: Invoking auth bypass via unenforced @revoked status in golang.org/x/crypto/ssh/knownhosts

  GO-2026-5023: Invoking VerifiedPublicKeyCallback permissions skip enforcement in golang.org/x/crypto/ssh

  GO-2026-5033: Invoking pathological inputs can lead to client panic in golang.org/x/crypto/ssh/agent

  GO-2026-5932: The golang.org/x/crypto/openpgp package is unmaintained, unsafe by design, and has known security issues

  GO-2026-6303: Source-address critical option not enforced for non-public-key auth callbacks in golang.org/x/crypto/ssh

  GO-2026-6354: Prevent DoS on deadlocked undecided channel in golang.org/x/crypto/ssh

  GO-2026-6355: Prevent DoS on deadlocked established channel in golang.org/x/crypto/ssh

Sep 4, 2024 GO-2024-3321 +21 more

  GO-2024-3321: Misuse of connection.serverAuthenticate may cause authorization bypass in golang.org/x/crypto

  GO-2025-3487: Potential denial of service in golang.org/x/crypto

  GO-2025-4116: Potential denial of service in golang.org/x/crypto/ssh/agent

  GO-2025-4134: Unbounded memory consumption in golang.org/x/crypto/ssh

  GO-2025-4135: Malformed constraint may cause denial of service in golang.org/x/crypto/ssh/agent

  GO-2026-5005: Invoking key constraints not enforced in golang.org/x/crypto/ssh/agent

  GO-2026-5006: Invoking agent constraints dropped when forwarding keys in golang.org/x/crypto/ssh/agent

  GO-2026-5013: Invoking byte arithmetic causes underflow and panic in golang.org/x/crypto/ssh

  GO-2026-5014: Invoking bypass of certificate restrictions in golang.org/x/crypto/ssh

  GO-2026-5015: Invoking server panic during CheckHostKey/Authenticate in golang.org/x/crypto/ssh

  GO-2026-5016: Invoking memory leak when rejecting channels can lead to DoS in golang.org/x/crypto/ssh

  GO-2026-5017: Invoking client can cause server deadlock on unexpected responses in golang.org/x/crypto/ssh

  GO-2026-5018: Invoking pathological RSA/DSA parameters may cause DoS in golang.org/x/crypto/ssh

  GO-2026-5019: Invoking bypass of FIDO/U2F security keys physical interaction in golang.org/x/crypto/ssh

  GO-2026-5020: Invoking infinite loop on large channel writes in golang.org/x/crypto/ssh

  GO-2026-5021: Invoking auth bypass via unenforced @revoked status in golang.org/x/crypto/ssh/knownhosts

  GO-2026-5023: Invoking VerifiedPublicKeyCallback permissions skip enforcement in golang.org/x/crypto/ssh

  GO-2026-5033: Invoking pathological inputs can lead to client panic in golang.org/x/crypto/ssh/agent

  GO-2026-5932: The golang.org/x/crypto/openpgp package is unmaintained, unsafe by design, and has known security issues

  GO-2026-6303: Source-address critical option not enforced for non-public-key auth callbacks in golang.org/x/crypto/ssh

  GO-2026-6354: Prevent DoS on deadlocked undecided channel in golang.org/x/crypto/ssh

  GO-2026-6355: Prevent DoS on deadlocked established channel in golang.org/x/crypto/ssh

Aug 6, 2024 GO-2024-3321 +21 more

  GO-2024-3321: Misuse of connection.serverAuthenticate may cause authorization bypass in golang.org/x/crypto

  GO-2025-3487: Potential denial of service in golang.org/x/crypto

  GO-2025-4116: Potential denial of service in golang.org/x/crypto/ssh/agent

  GO-2025-4134: Unbounded memory consumption in golang.org/x/crypto/ssh

  GO-2025-4135: Malformed constraint may cause denial of service in golang.org/x/crypto/ssh/agent

  GO-2026-5005: Invoking key constraints not enforced in golang.org/x/crypto/ssh/agent

  GO-2026-5006: Invoking agent constraints dropped when forwarding keys in golang.org/x/crypto/ssh/agent

  GO-2026-5013: Invoking byte arithmetic causes underflow and panic in golang.org/x/crypto/ssh

  GO-2026-5014: Invoking bypass of certificate restrictions in golang.org/x/crypto/ssh

  GO-2026-5015: Invoking server panic during CheckHostKey/Authenticate in golang.org/x/crypto/ssh

  GO-2026-5016: Invoking memory leak when rejecting channels can lead to DoS in golang.org/x/crypto/ssh

  GO-2026-5017: Invoking client can cause server deadlock on unexpected responses in golang.org/x/crypto/ssh

  GO-2026-5018: Invoking pathological RSA/DSA parameters may cause DoS in golang.org/x/crypto/ssh

  GO-2026-5019: Invoking bypass of FIDO/U2F security keys physical interaction in golang.org/x/crypto/ssh

  GO-2026-5020: Invoking infinite loop on large channel writes in golang.org/x/crypto/ssh

  GO-2026-5021: Invoking auth bypass via unenforced @revoked status in golang.org/x/crypto/ssh/knownhosts

  GO-2026-5023: Invoking VerifiedPublicKeyCallback permissions skip enforcement in golang.org/x/crypto/ssh

  GO-2026-5033: Invoking pathological inputs can lead to client panic in golang.org/x/crypto/ssh/agent

  GO-2026-5932: The golang.org/x/crypto/openpgp package is unmaintained, unsafe by design, and has known security issues

  GO-2026-6303: Source-address critical option not enforced for non-public-key auth callbacks in golang.org/x/crypto/ssh

  GO-2026-6354: Prevent DoS on deadlocked undecided channel in golang.org/x/crypto/ssh

  GO-2026-6355: Prevent DoS on deadlocked established channel in golang.org/x/crypto/ssh

Jul 5, 2024 GO-2024-3321 +21 more

  GO-2024-3321: Misuse of connection.serverAuthenticate may cause authorization bypass in golang.org/x/crypto

  GO-2025-3487: Potential denial of service in golang.org/x/crypto

  GO-2025-4116: Potential denial of service in golang.org/x/crypto/ssh/agent

  GO-2025-4134: Unbounded memory consumption in golang.org/x/crypto/ssh

  GO-2025-4135: Malformed constraint may cause denial of service in golang.org/x/crypto/ssh/agent

  GO-2026-5005: Invoking key constraints not enforced in golang.org/x/crypto/ssh/agent

  GO-2026-5006: Invoking agent constraints dropped when forwarding keys in golang.org/x/crypto/ssh/agent

  GO-2026-5013: Invoking byte arithmetic causes underflow and panic in golang.org/x/crypto/ssh

  GO-2026-5014: Invoking bypass of certificate restrictions in golang.org/x/crypto/ssh

  GO-2026-5015: Invoking server panic during CheckHostKey/Authenticate in golang.org/x/crypto/ssh

  GO-2026-5016: Invoking memory leak when rejecting channels can lead to DoS in golang.org/x/crypto/ssh

  GO-2026-5017: Invoking client can cause server deadlock on unexpected responses in golang.org/x/crypto/ssh

  GO-2026-5018: Invoking pathological RSA/DSA parameters may cause DoS in golang.org/x/crypto/ssh

  GO-2026-5019: Invoking bypass of FIDO/U2F security keys physical interaction in golang.org/x/crypto/ssh

  GO-2026-5020: Invoking infinite loop on large channel writes in golang.org/x/crypto/ssh

  GO-2026-5021: Invoking auth bypass via unenforced @revoked status in golang.org/x/crypto/ssh/knownhosts

  GO-2026-5023: Invoking VerifiedPublicKeyCallback permissions skip enforcement in golang.org/x/crypto/ssh

  GO-2026-5033: Invoking pathological inputs can lead to client panic in golang.org/x/crypto/ssh/agent

  GO-2026-5932: The golang.org/x/crypto/openpgp package is unmaintained, unsafe by design, and has known security issues

  GO-2026-6303: Source-address critical option not enforced for non-public-key auth callbacks in golang.org/x/crypto/ssh

  GO-2026-6354: Prevent DoS on deadlocked undecided channel in golang.org/x/crypto/ssh

  GO-2026-6355: Prevent DoS on deadlocked established channel in golang.org/x/crypto/ssh

Jun 4, 2024 GO-2024-3321 +21 more

  GO-2024-3321: Misuse of connection.serverAuthenticate may cause authorization bypass in golang.org/x/crypto

  GO-2025-3487: Potential denial of service in golang.org/x/crypto

  GO-2025-4116: Potential denial of service in golang.org/x/crypto/ssh/agent

  GO-2025-4134: Unbounded memory consumption in golang.org/x/crypto/ssh

  GO-2025-4135: Malformed constraint may cause denial of service in golang.org/x/crypto/ssh/agent

  GO-2026-5005: Invoking key constraints not enforced in golang.org/x/crypto/ssh/agent

  GO-2026-5006: Invoking agent constraints dropped when forwarding keys in golang.org/x/crypto/ssh/agent

  GO-2026-5013: Invoking byte arithmetic causes underflow and panic in golang.org/x/crypto/ssh

  GO-2026-5014: Invoking bypass of certificate restrictions in golang.org/x/crypto/ssh

  GO-2026-5015: Invoking server panic during CheckHostKey/Authenticate in golang.org/x/crypto/ssh

  GO-2026-5016: Invoking memory leak when rejecting channels can lead to DoS in golang.org/x/crypto/ssh

  GO-2026-5017: Invoking client can cause server deadlock on unexpected responses in golang.org/x/crypto/ssh

  GO-2026-5018: Invoking pathological RSA/DSA parameters may cause DoS in golang.org/x/crypto/ssh

  GO-2026-5019: Invoking bypass of FIDO/U2F security keys physical interaction in golang.org/x/crypto/ssh

  GO-2026-5020: Invoking infinite loop on large channel writes in golang.org/x/crypto/ssh

  GO-2026-5021: Invoking auth bypass via unenforced @revoked status in golang.org/x/crypto/ssh/knownhosts

  GO-2026-5023: Invoking VerifiedPublicKeyCallback permissions skip enforcement in golang.org/x/crypto/ssh

  GO-2026-5033: Invoking pathological inputs can lead to client panic in golang.org/x/crypto/ssh/agent

  GO-2026-5932: The golang.org/x/crypto/openpgp package is unmaintained, unsafe by design, and has known security issues

  GO-2026-6303: Source-address critical option not enforced for non-public-key auth callbacks in golang.org/x/crypto/ssh

  GO-2026-6354: Prevent DoS on deadlocked undecided channel in golang.org/x/crypto/ssh

  GO-2026-6355: Prevent DoS on deadlocked established channel in golang.org/x/crypto/ssh

May 6, 2024 GO-2024-3321 +21 more

  GO-2024-3321: Misuse of connection.serverAuthenticate may cause authorization bypass in golang.org/x/crypto

  GO-2025-3487: Potential denial of service in golang.org/x/crypto

  GO-2025-4116: Potential denial of service in golang.org/x/crypto/ssh/agent

  GO-2025-4134: Unbounded memory consumption in golang.org/x/crypto/ssh

  GO-2025-4135: Malformed constraint may cause denial of service in golang.org/x/crypto/ssh/agent

  GO-2026-5005: Invoking key constraints not enforced in golang.org/x/crypto/ssh/agent

  GO-2026-5006: Invoking agent constraints dropped when forwarding keys in golang.org/x/crypto/ssh/agent

  GO-2026-5013: Invoking byte arithmetic causes underflow and panic in golang.org/x/crypto/ssh

  GO-2026-5014: Invoking bypass of certificate restrictions in golang.org/x/crypto/ssh

  GO-2026-5015: Invoking server panic during CheckHostKey/Authenticate in golang.org/x/crypto/ssh

  GO-2026-5016: Invoking memory leak when rejecting channels can lead to DoS in golang.org/x/crypto/ssh

  GO-2026-5017: Invoking client can cause server deadlock on unexpected responses in golang.org/x/crypto/ssh

  GO-2026-5018: Invoking pathological RSA/DSA parameters may cause DoS in golang.org/x/crypto/ssh

  GO-2026-5019: Invoking bypass of FIDO/U2F security keys physical interaction in golang.org/x/crypto/ssh

  GO-2026-5020: Invoking infinite loop on large channel writes in golang.org/x/crypto/ssh

  GO-2026-5021: Invoking auth bypass via unenforced @revoked status in golang.org/x/crypto/ssh/knownhosts

  GO-2026-5023: Invoking VerifiedPublicKeyCallback permissions skip enforcement in golang.org/x/crypto/ssh

  GO-2026-5033: Invoking pathological inputs can lead to client panic in golang.org/x/crypto/ssh/agent

  GO-2026-5932: The golang.org/x/crypto/openpgp package is unmaintained, unsafe by design, and has known security issues

  GO-2026-6303: Source-address critical option not enforced for non-public-key auth callbacks in golang.org/x/crypto/ssh

  GO-2026-6354: Prevent DoS on deadlocked undecided channel in golang.org/x/crypto/ssh

  GO-2026-6355: Prevent DoS on deadlocked established channel in golang.org/x/crypto/ssh

Apr 4, 2024 GO-2024-3321 +21 more

  GO-2024-3321: Misuse of connection.serverAuthenticate may cause authorization bypass in golang.org/x/crypto

  GO-2025-3487: Potential denial of service in golang.org/x/crypto

  GO-2025-4116: Potential denial of service in golang.org/x/crypto/ssh/agent

  GO-2025-4134: Unbounded memory consumption in golang.org/x/crypto/ssh

  GO-2025-4135: Malformed constraint may cause denial of service in golang.org/x/crypto/ssh/agent

  GO-2026-5005: Invoking key constraints not enforced in golang.org/x/crypto/ssh/agent

  GO-2026-5006: Invoking agent constraints dropped when forwarding keys in golang.org/x/crypto/ssh/agent

  GO-2026-5013: Invoking byte arithmetic causes underflow and panic in golang.org/x/crypto/ssh

  GO-2026-5014: Invoking bypass of certificate restrictions in golang.org/x/crypto/ssh

  GO-2026-5015: Invoking server panic during CheckHostKey/Authenticate in golang.org/x/crypto/ssh

  GO-2026-5016: Invoking memory leak when rejecting channels can lead to DoS in golang.org/x/crypto/ssh

  GO-2026-5017: Invoking client can cause server deadlock on unexpected responses in golang.org/x/crypto/ssh

  GO-2026-5018: Invoking pathological RSA/DSA parameters may cause DoS in golang.org/x/crypto/ssh

  GO-2026-5019: Invoking bypass of FIDO/U2F security keys physical interaction in golang.org/x/crypto/ssh

  GO-2026-5020: Invoking infinite loop on large channel writes in golang.org/x/crypto/ssh

  GO-2026-5021: Invoking auth bypass via unenforced @revoked status in golang.org/x/crypto/ssh/knownhosts

  GO-2026-5023: Invoking VerifiedPublicKeyCallback permissions skip enforcement in golang.org/x/crypto/ssh

  GO-2026-5033: Invoking pathological inputs can lead to client panic in golang.org/x/crypto/ssh/agent

  GO-2026-5932: The golang.org/x/crypto/openpgp package is unmaintained, unsafe by design, and has known security issues

  GO-2026-6303: Source-address critical option not enforced for non-public-key auth callbacks in golang.org/x/crypto/ssh

  GO-2026-6354: Prevent DoS on deadlocked undecided channel in golang.org/x/crypto/ssh

  GO-2026-6355: Prevent DoS on deadlocked established channel in golang.org/x/crypto/ssh

Mar 4, 2024 GO-2024-3321 +21 more

  GO-2024-3321: Misuse of connection.serverAuthenticate may cause authorization bypass in golang.org/x/crypto

  GO-2025-3487: Potential denial of service in golang.org/x/crypto

  GO-2025-4116: Potential denial of service in golang.org/x/crypto/ssh/agent

  GO-2025-4134: Unbounded memory consumption in golang.org/x/crypto/ssh

  GO-2025-4135: Malformed constraint may cause denial of service in golang.org/x/crypto/ssh/agent

  GO-2026-5005: Invoking key constraints not enforced in golang.org/x/crypto/ssh/agent

  GO-2026-5006: Invoking agent constraints dropped when forwarding keys in golang.org/x/crypto/ssh/agent

  GO-2026-5013: Invoking byte arithmetic causes underflow and panic in golang.org/x/crypto/ssh

  GO-2026-5014: Invoking bypass of certificate restrictions in golang.org/x/crypto/ssh

  GO-2026-5015: Invoking server panic during CheckHostKey/Authenticate in golang.org/x/crypto/ssh

  GO-2026-5016: Invoking memory leak when rejecting channels can lead to DoS in golang.org/x/crypto/ssh

  GO-2026-5017: Invoking client can cause server deadlock on unexpected responses in golang.org/x/crypto/ssh

  GO-2026-5018: Invoking pathological RSA/DSA parameters may cause DoS in golang.org/x/crypto/ssh

  GO-2026-5019: Invoking bypass of FIDO/U2F security keys physical interaction in golang.org/x/crypto/ssh

  GO-2026-5020: Invoking infinite loop on large channel writes in golang.org/x/crypto/ssh

  GO-2026-5021: Invoking auth bypass via unenforced @revoked status in golang.org/x/crypto/ssh/knownhosts

  GO-2026-5023: Invoking VerifiedPublicKeyCallback permissions skip enforcement in golang.org/x/crypto/ssh

  GO-2026-5033: Invoking pathological inputs can lead to client panic in golang.org/x/crypto/ssh/agent

  GO-2026-5932: The golang.org/x/crypto/openpgp package is unmaintained, unsafe by design, and has known security issues

  GO-2026-6303: Source-address critical option not enforced for non-public-key auth callbacks in golang.org/x/crypto/ssh

  GO-2026-6354: Prevent DoS on deadlocked undecided channel in golang.org/x/crypto/ssh

  GO-2026-6355: Prevent DoS on deadlocked established channel in golang.org/x/crypto/ssh

Feb 26, 2024 GO-2024-3321 +21 more

  GO-2024-3321: Misuse of connection.serverAuthenticate may cause authorization bypass in golang.org/x/crypto

  GO-2025-3487: Potential denial of service in golang.org/x/crypto

  GO-2025-4116: Potential denial of service in golang.org/x/crypto/ssh/agent

  GO-2025-4134: Unbounded memory consumption in golang.org/x/crypto/ssh

  GO-2025-4135: Malformed constraint may cause denial of service in golang.org/x/crypto/ssh/agent

  GO-2026-5005: Invoking key constraints not enforced in golang.org/x/crypto/ssh/agent

  GO-2026-5006: Invoking agent constraints dropped when forwarding keys in golang.org/x/crypto/ssh/agent

  GO-2026-5013: Invoking byte arithmetic causes underflow and panic in golang.org/x/crypto/ssh

  GO-2026-5014: Invoking bypass of certificate restrictions in golang.org/x/crypto/ssh

  GO-2026-5015: Invoking server panic during CheckHostKey/Authenticate in golang.org/x/crypto/ssh

  GO-2026-5016: Invoking memory leak when rejecting channels can lead to DoS in golang.org/x/crypto/ssh

  GO-2026-5017: Invoking client can cause server deadlock on unexpected responses in golang.org/x/crypto/ssh

  GO-2026-5018: Invoking pathological RSA/DSA parameters may cause DoS in golang.org/x/crypto/ssh

  GO-2026-5019: Invoking bypass of FIDO/U2F security keys physical interaction in golang.org/x/crypto/ssh

  GO-2026-5020: Invoking infinite loop on large channel writes in golang.org/x/crypto/ssh

  GO-2026-5021: Invoking auth bypass via unenforced @revoked status in golang.org/x/crypto/ssh/knownhosts

  GO-2026-5023: Invoking VerifiedPublicKeyCallback permissions skip enforcement in golang.org/x/crypto/ssh

  GO-2026-5033: Invoking pathological inputs can lead to client panic in golang.org/x/crypto/ssh/agent

  GO-2026-5932: The golang.org/x/crypto/openpgp package is unmaintained, unsafe by design, and has known security issues

  GO-2026-6303: Source-address critical option not enforced for non-public-key auth callbacks in golang.org/x/crypto/ssh

  GO-2026-6354: Prevent DoS on deadlocked undecided channel in golang.org/x/crypto/ssh

  GO-2026-6355: Prevent DoS on deadlocked established channel in golang.org/x/crypto/ssh

Feb 7, 2024 GO-2024-3321 +21 more

  GO-2024-3321: Misuse of connection.serverAuthenticate may cause authorization bypass in golang.org/x/crypto

  GO-2025-3487: Potential denial of service in golang.org/x/crypto

  GO-2025-4116: Potential denial of service in golang.org/x/crypto/ssh/agent

  GO-2025-4134: Unbounded memory consumption in golang.org/x/crypto/ssh

  GO-2025-4135: Malformed constraint may cause denial of service in golang.org/x/crypto/ssh/agent

  GO-2026-5005: Invoking key constraints not enforced in golang.org/x/crypto/ssh/agent

  GO-2026-5006: Invoking agent constraints dropped when forwarding keys in golang.org/x/crypto/ssh/agent

  GO-2026-5013: Invoking byte arithmetic causes underflow and panic in golang.org/x/crypto/ssh

  GO-2026-5014: Invoking bypass of certificate restrictions in golang.org/x/crypto/ssh

  GO-2026-5015: Invoking server panic during CheckHostKey/Authenticate in golang.org/x/crypto/ssh

  GO-2026-5016: Invoking memory leak when rejecting channels can lead to DoS in golang.org/x/crypto/ssh

  GO-2026-5017: Invoking client can cause server deadlock on unexpected responses in golang.org/x/crypto/ssh

  GO-2026-5018: Invoking pathological RSA/DSA parameters may cause DoS in golang.org/x/crypto/ssh

  GO-2026-5019: Invoking bypass of FIDO/U2F security keys physical interaction in golang.org/x/crypto/ssh

  GO-2026-5020: Invoking infinite loop on large channel writes in golang.org/x/crypto/ssh

  GO-2026-5021: Invoking auth bypass via unenforced @revoked status in golang.org/x/crypto/ssh/knownhosts

  GO-2026-5023: Invoking VerifiedPublicKeyCallback permissions skip enforcement in golang.org/x/crypto/ssh

  GO-2026-5033: Invoking pathological inputs can lead to client panic in golang.org/x/crypto/ssh/agent

  GO-2026-5932: The golang.org/x/crypto/openpgp package is unmaintained, unsafe by design, and has known security issues

  GO-2026-6303: Source-address critical option not enforced for non-public-key auth callbacks in golang.org/x/crypto/ssh

  GO-2026-6354: Prevent DoS on deadlocked undecided channel in golang.org/x/crypto/ssh

  GO-2026-6355: Prevent DoS on deadlocked established channel in golang.org/x/crypto/ssh

Jan 8, 2024 GO-2024-3321 +21 more

  GO-2024-3321: Misuse of connection.serverAuthenticate may cause authorization bypass in golang.org/x/crypto

  GO-2025-3487: Potential denial of service in golang.org/x/crypto

  GO-2025-4116: Potential denial of service in golang.org/x/crypto/ssh/agent

  GO-2025-4134: Unbounded memory consumption in golang.org/x/crypto/ssh

  GO-2025-4135: Malformed constraint may cause denial of service in golang.org/x/crypto/ssh/agent

  GO-2026-5005: Invoking key constraints not enforced in golang.org/x/crypto/ssh/agent

  GO-2026-5006: Invoking agent constraints dropped when forwarding keys in golang.org/x/crypto/ssh/agent

  GO-2026-5013: Invoking byte arithmetic causes underflow and panic in golang.org/x/crypto/ssh

  GO-2026-5014: Invoking bypass of certificate restrictions in golang.org/x/crypto/ssh

  GO-2026-5015: Invoking server panic during CheckHostKey/Authenticate in golang.org/x/crypto/ssh

  GO-2026-5016: Invoking memory leak when rejecting channels can lead to DoS in golang.org/x/crypto/ssh

  GO-2026-5017: Invoking client can cause server deadlock on unexpected responses in golang.org/x/crypto/ssh

  GO-2026-5018: Invoking pathological RSA/DSA parameters may cause DoS in golang.org/x/crypto/ssh

  GO-2026-5019: Invoking bypass of FIDO/U2F security keys physical interaction in golang.org/x/crypto/ssh

  GO-2026-5020: Invoking infinite loop on large channel writes in golang.org/x/crypto/ssh

  GO-2026-5021: Invoking auth bypass via unenforced @revoked status in golang.org/x/crypto/ssh/knownhosts

  GO-2026-5023: Invoking VerifiedPublicKeyCallback permissions skip enforcement in golang.org/x/crypto/ssh

  GO-2026-5033: Invoking pathological inputs can lead to client panic in golang.org/x/crypto/ssh/agent

  GO-2026-5932: The golang.org/x/crypto/openpgp package is unmaintained, unsafe by design, and has known security issues

  GO-2026-6303: Source-address critical option not enforced for non-public-key auth callbacks in golang.org/x/crypto/ssh

  GO-2026-6354: Prevent DoS on deadlocked undecided channel in golang.org/x/crypto/ssh

  GO-2026-6355: Prevent DoS on deadlocked established channel in golang.org/x/crypto/ssh

Dec 18, 2023 GO-2024-3321 +21 more

  GO-2024-3321: Misuse of connection.serverAuthenticate may cause authorization bypass in golang.org/x/crypto

  GO-2025-3487: Potential denial of service in golang.org/x/crypto

  GO-2025-4116: Potential denial of service in golang.org/x/crypto/ssh/agent

  GO-2025-4134: Unbounded memory consumption in golang.org/x/crypto/ssh

  GO-2025-4135: Malformed constraint may cause denial of service in golang.org/x/crypto/ssh/agent

  GO-2026-5005: Invoking key constraints not enforced in golang.org/x/crypto/ssh/agent

  GO-2026-5006: Invoking agent constraints dropped when forwarding keys in golang.org/x/crypto/ssh/agent

  GO-2026-5013: Invoking byte arithmetic causes underflow and panic in golang.org/x/crypto/ssh

  GO-2026-5014: Invoking bypass of certificate restrictions in golang.org/x/crypto/ssh

  GO-2026-5015: Invoking server panic during CheckHostKey/Authenticate in golang.org/x/crypto/ssh

  GO-2026-5016: Invoking memory leak when rejecting channels can lead to DoS in golang.org/x/crypto/ssh

  GO-2026-5017: Invoking client can cause server deadlock on unexpected responses in golang.org/x/crypto/ssh

  GO-2026-5018: Invoking pathological RSA/DSA parameters may cause DoS in golang.org/x/crypto/ssh

  GO-2026-5019: Invoking bypass of FIDO/U2F security keys physical interaction in golang.org/x/crypto/ssh

  GO-2026-5020: Invoking infinite loop on large channel writes in golang.org/x/crypto/ssh

  GO-2026-5021: Invoking auth bypass via unenforced @revoked status in golang.org/x/crypto/ssh/knownhosts

  GO-2026-5023: Invoking VerifiedPublicKeyCallback permissions skip enforcement in golang.org/x/crypto/ssh

  GO-2026-5033: Invoking pathological inputs can lead to client panic in golang.org/x/crypto/ssh/agent

  GO-2026-5932: The golang.org/x/crypto/openpgp package is unmaintained, unsafe by design, and has known security issues

  GO-2026-6303: Source-address critical option not enforced for non-public-key auth callbacks in golang.org/x/crypto/ssh

  GO-2026-6354: Prevent DoS on deadlocked undecided channel in golang.org/x/crypto/ssh

  GO-2026-6355: Prevent DoS on deadlocked established channel in golang.org/x/crypto/ssh

Nov 27, 2023 GO-2023-2402 +22 more

  GO-2023-2402: Man-in-the-middle attacker can compromise integrity of secure channel in golang.org/x/crypto

  GO-2024-3321: Misuse of connection.serverAuthenticate may cause authorization bypass in golang.org/x/crypto

  GO-2025-3487: Potential denial of service in golang.org/x/crypto

  GO-2025-4116: Potential denial of service in golang.org/x/crypto/ssh/agent

  GO-2025-4134: Unbounded memory consumption in golang.org/x/crypto/ssh

  GO-2025-4135: Malformed constraint may cause denial of service in golang.org/x/crypto/ssh/agent

  GO-2026-5005: Invoking key constraints not enforced in golang.org/x/crypto/ssh/agent

  GO-2026-5006: Invoking agent constraints dropped when forwarding keys in golang.org/x/crypto/ssh/agent

  GO-2026-5013: Invoking byte arithmetic causes underflow and panic in golang.org/x/crypto/ssh

  GO-2026-5014: Invoking bypass of certificate restrictions in golang.org/x/crypto/ssh

  GO-2026-5015: Invoking server panic during CheckHostKey/Authenticate in golang.org/x/crypto/ssh

  GO-2026-5016: Invoking memory leak when rejecting channels can lead to DoS in golang.org/x/crypto/ssh

  GO-2026-5017: Invoking client can cause server deadlock on unexpected responses in golang.org/x/crypto/ssh

  GO-2026-5018: Invoking pathological RSA/DSA parameters may cause DoS in golang.org/x/crypto/ssh

  GO-2026-5019: Invoking bypass of FIDO/U2F security keys physical interaction in golang.org/x/crypto/ssh

  GO-2026-5020: Invoking infinite loop on large channel writes in golang.org/x/crypto/ssh

  GO-2026-5021: Invoking auth bypass via unenforced @revoked status in golang.org/x/crypto/ssh/knownhosts

  GO-2026-5023: Invoking VerifiedPublicKeyCallback permissions skip enforcement in golang.org/x/crypto/ssh

  GO-2026-5033: Invoking pathological inputs can lead to client panic in golang.org/x/crypto/ssh/agent

  GO-2026-5932: The golang.org/x/crypto/openpgp package is unmaintained, unsafe by design, and has known security issues

  GO-2026-6303: Source-address critical option not enforced for non-public-key auth callbacks in golang.org/x/crypto/ssh

  GO-2026-6354: Prevent DoS on deadlocked undecided channel in golang.org/x/crypto/ssh

  GO-2026-6355: Prevent DoS on deadlocked established channel in golang.org/x/crypto/ssh

Nov 8, 2023 GO-2023-2402 +22 more

  GO-2023-2402: Man-in-the-middle attacker can compromise integrity of secure channel in golang.org/x/crypto

  GO-2024-3321: Misuse of connection.serverAuthenticate may cause authorization bypass in golang.org/x/crypto

  GO-2025-3487: Potential denial of service in golang.org/x/crypto

  GO-2025-4116: Potential denial of service in golang.org/x/crypto/ssh/agent

  GO-2025-4134: Unbounded memory consumption in golang.org/x/crypto/ssh

  GO-2025-4135: Malformed constraint may cause denial of service in golang.org/x/crypto/ssh/agent

  GO-2026-5005: Invoking key constraints not enforced in golang.org/x/crypto/ssh/agent

  GO-2026-5006: Invoking agent constraints dropped when forwarding keys in golang.org/x/crypto/ssh/agent

  GO-2026-5013: Invoking byte arithmetic causes underflow and panic in golang.org/x/crypto/ssh

  GO-2026-5014: Invoking bypass of certificate restrictions in golang.org/x/crypto/ssh

  GO-2026-5015: Invoking server panic during CheckHostKey/Authenticate in golang.org/x/crypto/ssh

  GO-2026-5016: Invoking memory leak when rejecting channels can lead to DoS in golang.org/x/crypto/ssh

  GO-2026-5017: Invoking client can cause server deadlock on unexpected responses in golang.org/x/crypto/ssh

  GO-2026-5018: Invoking pathological RSA/DSA parameters may cause DoS in golang.org/x/crypto/ssh

  GO-2026-5019: Invoking bypass of FIDO/U2F security keys physical interaction in golang.org/x/crypto/ssh

  GO-2026-5020: Invoking infinite loop on large channel writes in golang.org/x/crypto/ssh

  GO-2026-5021: Invoking auth bypass via unenforced @revoked status in golang.org/x/crypto/ssh/knownhosts

  GO-2026-5023: Invoking VerifiedPublicKeyCallback permissions skip enforcement in golang.org/x/crypto/ssh

  GO-2026-5033: Invoking pathological inputs can lead to client panic in golang.org/x/crypto/ssh/agent

  GO-2026-5932: The golang.org/x/crypto/openpgp package is unmaintained, unsafe by design, and has known security issues

  GO-2026-6303: Source-address critical option not enforced for non-public-key auth callbacks in golang.org/x/crypto/ssh

  GO-2026-6354: Prevent DoS on deadlocked undecided channel in golang.org/x/crypto/ssh

  GO-2026-6355: Prevent DoS on deadlocked established channel in golang.org/x/crypto/ssh

Oct 5, 2023 GO-2023-2402 +22 more

  GO-2023-2402: Man-in-the-middle attacker can compromise integrity of secure channel in golang.org/x/crypto

  GO-2024-3321: Misuse of connection.serverAuthenticate may cause authorization bypass in golang.org/x/crypto

  GO-2025-3487: Potential denial of service in golang.org/x/crypto

  GO-2025-4116: Potential denial of service in golang.org/x/crypto/ssh/agent

  GO-2025-4134: Unbounded memory consumption in golang.org/x/crypto/ssh

  GO-2025-4135: Malformed constraint may cause denial of service in golang.org/x/crypto/ssh/agent

  GO-2026-5005: Invoking key constraints not enforced in golang.org/x/crypto/ssh/agent

  GO-2026-5006: Invoking agent constraints dropped when forwarding keys in golang.org/x/crypto/ssh/agent

  GO-2026-5013: Invoking byte arithmetic causes underflow and panic in golang.org/x/crypto/ssh

  GO-2026-5014: Invoking bypass of certificate restrictions in golang.org/x/crypto/ssh

  GO-2026-5015: Invoking server panic during CheckHostKey/Authenticate in golang.org/x/crypto/ssh

  GO-2026-5016: Invoking memory leak when rejecting channels can lead to DoS in golang.org/x/crypto/ssh

  GO-2026-5017: Invoking client can cause server deadlock on unexpected responses in golang.org/x/crypto/ssh

  GO-2026-5018: Invoking pathological RSA/DSA parameters may cause DoS in golang.org/x/crypto/ssh

  GO-2026-5019: Invoking bypass of FIDO/U2F security keys physical interaction in golang.org/x/crypto/ssh

  GO-2026-5020: Invoking infinite loop on large channel writes in golang.org/x/crypto/ssh

  GO-2026-5021: Invoking auth bypass via unenforced @revoked status in golang.org/x/crypto/ssh/knownhosts

  GO-2026-5023: Invoking VerifiedPublicKeyCallback permissions skip enforcement in golang.org/x/crypto/ssh

  GO-2026-5033: Invoking pathological inputs can lead to client panic in golang.org/x/crypto/ssh/agent

  GO-2026-5932: The golang.org/x/crypto/openpgp package is unmaintained, unsafe by design, and has known security issues

  GO-2026-6303: Source-address critical option not enforced for non-public-key auth callbacks in golang.org/x/crypto/ssh

  GO-2026-6354: Prevent DoS on deadlocked undecided channel in golang.org/x/crypto/ssh

  GO-2026-6355: Prevent DoS on deadlocked established channel in golang.org/x/crypto/ssh

Sep 5, 2023 GO-2023-2402 +22 more

  GO-2023-2402: Man-in-the-middle attacker can compromise integrity of secure channel in golang.org/x/crypto

  GO-2024-3321: Misuse of connection.serverAuthenticate may cause authorization bypass in golang.org/x/crypto

  GO-2025-3487: Potential denial of service in golang.org/x/crypto

  GO-2025-4116: Potential denial of service in golang.org/x/crypto/ssh/agent

  GO-2025-4134: Unbounded memory consumption in golang.org/x/crypto/ssh

  GO-2025-4135: Malformed constraint may cause denial of service in golang.org/x/crypto/ssh/agent

  GO-2026-5005: Invoking key constraints not enforced in golang.org/x/crypto/ssh/agent

  GO-2026-5006: Invoking agent constraints dropped when forwarding keys in golang.org/x/crypto/ssh/agent

  GO-2026-5013: Invoking byte arithmetic causes underflow and panic in golang.org/x/crypto/ssh

  GO-2026-5014: Invoking bypass of certificate restrictions in golang.org/x/crypto/ssh

  GO-2026-5015: Invoking server panic during CheckHostKey/Authenticate in golang.org/x/crypto/ssh

  GO-2026-5016: Invoking memory leak when rejecting channels can lead to DoS in golang.org/x/crypto/ssh

  GO-2026-5017: Invoking client can cause server deadlock on unexpected responses in golang.org/x/crypto/ssh

  GO-2026-5018: Invoking pathological RSA/DSA parameters may cause DoS in golang.org/x/crypto/ssh

  GO-2026-5019: Invoking bypass of FIDO/U2F security keys physical interaction in golang.org/x/crypto/ssh

  GO-2026-5020: Invoking infinite loop on large channel writes in golang.org/x/crypto/ssh

  GO-2026-5021: Invoking auth bypass via unenforced @revoked status in golang.org/x/crypto/ssh/knownhosts

  GO-2026-5023: Invoking VerifiedPublicKeyCallback permissions skip enforcement in golang.org/x/crypto/ssh

  GO-2026-5033: Invoking pathological inputs can lead to client panic in golang.org/x/crypto/ssh/agent

  GO-2026-5932: The golang.org/x/crypto/openpgp package is unmaintained, unsafe by design, and has known security issues

  GO-2026-6303: Source-address critical option not enforced for non-public-key auth callbacks in golang.org/x/crypto/ssh

  GO-2026-6354: Prevent DoS on deadlocked undecided channel in golang.org/x/crypto/ssh

  GO-2026-6355: Prevent DoS on deadlocked established channel in golang.org/x/crypto/ssh

Aug 4, 2023 GO-2023-2402 +22 more

  GO-2023-2402: Man-in-the-middle attacker can compromise integrity of secure channel in golang.org/x/crypto

  GO-2024-3321: Misuse of connection.serverAuthenticate may cause authorization bypass in golang.org/x/crypto

  GO-2025-3487: Potential denial of service in golang.org/x/crypto

  GO-2025-4116: Potential denial of service in golang.org/x/crypto/ssh/agent

  GO-2025-4134: Unbounded memory consumption in golang.org/x/crypto/ssh

  GO-2025-4135: Malformed constraint may cause denial of service in golang.org/x/crypto/ssh/agent

  GO-2026-5005: Invoking key constraints not enforced in golang.org/x/crypto/ssh/agent

  GO-2026-5006: Invoking agent constraints dropped when forwarding keys in golang.org/x/crypto/ssh/agent

  GO-2026-5013: Invoking byte arithmetic causes underflow and panic in golang.org/x/crypto/ssh

  GO-2026-5014: Invoking bypass of certificate restrictions in golang.org/x/crypto/ssh

  GO-2026-5015: Invoking server panic during CheckHostKey/Authenticate in golang.org/x/crypto/ssh

  GO-2026-5016: Invoking memory leak when rejecting channels can lead to DoS in golang.org/x/crypto/ssh

  GO-2026-5017: Invoking client can cause server deadlock on unexpected responses in golang.org/x/crypto/ssh

  GO-2026-5018: Invoking pathological RSA/DSA parameters may cause DoS in golang.org/x/crypto/ssh

  GO-2026-5019: Invoking bypass of FIDO/U2F security keys physical interaction in golang.org/x/crypto/ssh

  GO-2026-5020: Invoking infinite loop on large channel writes in golang.org/x/crypto/ssh

  GO-2026-5021: Invoking auth bypass via unenforced @revoked status in golang.org/x/crypto/ssh/knownhosts

  GO-2026-5023: Invoking VerifiedPublicKeyCallback permissions skip enforcement in golang.org/x/crypto/ssh

  GO-2026-5033: Invoking pathological inputs can lead to client panic in golang.org/x/crypto/ssh/agent

  GO-2026-5932: The golang.org/x/crypto/openpgp package is unmaintained, unsafe by design, and has known security issues

  GO-2026-6303: Source-address critical option not enforced for non-public-key auth callbacks in golang.org/x/crypto/ssh

  GO-2026-6354: Prevent DoS on deadlocked undecided channel in golang.org/x/crypto/ssh

  GO-2026-6355: Prevent DoS on deadlocked established channel in golang.org/x/crypto/ssh

Jul 5, 2023 GO-2023-2402 +22 more

  GO-2023-2402: Man-in-the-middle attacker can compromise integrity of secure channel in golang.org/x/crypto

  GO-2024-3321: Misuse of connection.serverAuthenticate may cause authorization bypass in golang.org/x/crypto

  GO-2025-3487: Potential denial of service in golang.org/x/crypto

  GO-2025-4116: Potential denial of service in golang.org/x/crypto/ssh/agent

  GO-2025-4134: Unbounded memory consumption in golang.org/x/crypto/ssh

  GO-2025-4135: Malformed constraint may cause denial of service in golang.org/x/crypto/ssh/agent

  GO-2026-5005: Invoking key constraints not enforced in golang.org/x/crypto/ssh/agent

  GO-2026-5006: Invoking agent constraints dropped when forwarding keys in golang.org/x/crypto/ssh/agent

  GO-2026-5013: Invoking byte arithmetic causes underflow and panic in golang.org/x/crypto/ssh

  GO-2026-5014: Invoking bypass of certificate restrictions in golang.org/x/crypto/ssh

  GO-2026-5015: Invoking server panic during CheckHostKey/Authenticate in golang.org/x/crypto/ssh

  GO-2026-5016: Invoking memory leak when rejecting channels can lead to DoS in golang.org/x/crypto/ssh

  GO-2026-5017: Invoking client can cause server deadlock on unexpected responses in golang.org/x/crypto/ssh

  GO-2026-5018: Invoking pathological RSA/DSA parameters may cause DoS in golang.org/x/crypto/ssh

  GO-2026-5019: Invoking bypass of FIDO/U2F security keys physical interaction in golang.org/x/crypto/ssh

  GO-2026-5020: Invoking infinite loop on large channel writes in golang.org/x/crypto/ssh

  GO-2026-5021: Invoking auth bypass via unenforced @revoked status in golang.org/x/crypto/ssh/knownhosts

  GO-2026-5023: Invoking VerifiedPublicKeyCallback permissions skip enforcement in golang.org/x/crypto/ssh

  GO-2026-5033: Invoking pathological inputs can lead to client panic in golang.org/x/crypto/ssh/agent

  GO-2026-5932: The golang.org/x/crypto/openpgp package is unmaintained, unsafe by design, and has known security issues

  GO-2026-6303: Source-address critical option not enforced for non-public-key auth callbacks in golang.org/x/crypto/ssh

  GO-2026-6354: Prevent DoS on deadlocked undecided channel in golang.org/x/crypto/ssh

  GO-2026-6355: Prevent DoS on deadlocked established channel in golang.org/x/crypto/ssh

Jun 12, 2023 GO-2023-2402 +22 more

  GO-2023-2402: Man-in-the-middle attacker can compromise integrity of secure channel in golang.org/x/crypto

  GO-2024-3321: Misuse of connection.serverAuthenticate may cause authorization bypass in golang.org/x/crypto

  GO-2025-3487: Potential denial of service in golang.org/x/crypto

  GO-2025-4116: Potential denial of service in golang.org/x/crypto/ssh/agent

  GO-2025-4134: Unbounded memory consumption in golang.org/x/crypto/ssh

  GO-2025-4135: Malformed constraint may cause denial of service in golang.org/x/crypto/ssh/agent

  GO-2026-5005: Invoking key constraints not enforced in golang.org/x/crypto/ssh/agent

  GO-2026-5006: Invoking agent constraints dropped when forwarding keys in golang.org/x/crypto/ssh/agent

  GO-2026-5013: Invoking byte arithmetic causes underflow and panic in golang.org/x/crypto/ssh

  GO-2026-5014: Invoking bypass of certificate restrictions in golang.org/x/crypto/ssh

  GO-2026-5015: Invoking server panic during CheckHostKey/Authenticate in golang.org/x/crypto/ssh

  GO-2026-5016: Invoking memory leak when rejecting channels can lead to DoS in golang.org/x/crypto/ssh

  GO-2026-5017: Invoking client can cause server deadlock on unexpected responses in golang.org/x/crypto/ssh

  GO-2026-5018: Invoking pathological RSA/DSA parameters may cause DoS in golang.org/x/crypto/ssh

  GO-2026-5019: Invoking bypass of FIDO/U2F security keys physical interaction in golang.org/x/crypto/ssh

  GO-2026-5020: Invoking infinite loop on large channel writes in golang.org/x/crypto/ssh

  GO-2026-5021: Invoking auth bypass via unenforced @revoked status in golang.org/x/crypto/ssh/knownhosts

  GO-2026-5023: Invoking VerifiedPublicKeyCallback permissions skip enforcement in golang.org/x/crypto/ssh

  GO-2026-5033: Invoking pathological inputs can lead to client panic in golang.org/x/crypto/ssh/agent

  GO-2026-5932: The golang.org/x/crypto/openpgp package is unmaintained, unsafe by design, and has known security issues

  GO-2026-6303: Source-address critical option not enforced for non-public-key auth callbacks in golang.org/x/crypto/ssh

  GO-2026-6354: Prevent DoS on deadlocked undecided channel in golang.org/x/crypto/ssh

  GO-2026-6355: Prevent DoS on deadlocked established channel in golang.org/x/crypto/ssh

May 8, 2023 GO-2023-2402 +22 more

  GO-2023-2402: Man-in-the-middle attacker can compromise integrity of secure channel in golang.org/x/crypto

  GO-2024-3321: Misuse of connection.serverAuthenticate may cause authorization bypass in golang.org/x/crypto

  GO-2025-3487: Potential denial of service in golang.org/x/crypto

  GO-2025-4116: Potential denial of service in golang.org/x/crypto/ssh/agent

  GO-2025-4134: Unbounded memory consumption in golang.org/x/crypto/ssh

  GO-2025-4135: Malformed constraint may cause denial of service in golang.org/x/crypto/ssh/agent

  GO-2026-5005: Invoking key constraints not enforced in golang.org/x/crypto/ssh/agent

  GO-2026-5006: Invoking agent constraints dropped when forwarding keys in golang.org/x/crypto/ssh/agent

  GO-2026-5013: Invoking byte arithmetic causes underflow and panic in golang.org/x/crypto/ssh

  GO-2026-5014: Invoking bypass of certificate restrictions in golang.org/x/crypto/ssh

  GO-2026-5015: Invoking server panic during CheckHostKey/Authenticate in golang.org/x/crypto/ssh

  GO-2026-5016: Invoking memory leak when rejecting channels can lead to DoS in golang.org/x/crypto/ssh

  GO-2026-5017: Invoking client can cause server deadlock on unexpected responses in golang.org/x/crypto/ssh

  GO-2026-5018: Invoking pathological RSA/DSA parameters may cause DoS in golang.org/x/crypto/ssh

  GO-2026-5019: Invoking bypass of FIDO/U2F security keys physical interaction in golang.org/x/crypto/ssh

  GO-2026-5020: Invoking infinite loop on large channel writes in golang.org/x/crypto/ssh

  GO-2026-5021: Invoking auth bypass via unenforced @revoked status in golang.org/x/crypto/ssh/knownhosts

  GO-2026-5023: Invoking VerifiedPublicKeyCallback permissions skip enforcement in golang.org/x/crypto/ssh

  GO-2026-5033: Invoking pathological inputs can lead to client panic in golang.org/x/crypto/ssh/agent

  GO-2026-5932: The golang.org/x/crypto/openpgp package is unmaintained, unsafe by design, and has known security issues

  GO-2026-6303: Source-address critical option not enforced for non-public-key auth callbacks in golang.org/x/crypto/ssh

  GO-2026-6354: Prevent DoS on deadlocked undecided channel in golang.org/x/crypto/ssh

  GO-2026-6355: Prevent DoS on deadlocked established channel in golang.org/x/crypto/ssh

Apr 6, 2023 GO-2023-2402 +22 more

  GO-2023-2402: Man-in-the-middle attacker can compromise integrity of secure channel in golang.org/x/crypto

  GO-2024-3321: Misuse of connection.serverAuthenticate may cause authorization bypass in golang.org/x/crypto

  GO-2025-3487: Potential denial of service in golang.org/x/crypto

  GO-2025-4116: Potential denial of service in golang.org/x/crypto/ssh/agent

  GO-2025-4134: Unbounded memory consumption in golang.org/x/crypto/ssh

  GO-2025-4135: Malformed constraint may cause denial of service in golang.org/x/crypto/ssh/agent

  GO-2026-5005: Invoking key constraints not enforced in golang.org/x/crypto/ssh/agent

  GO-2026-5006: Invoking agent constraints dropped when forwarding keys in golang.org/x/crypto/ssh/agent

  GO-2026-5013: Invoking byte arithmetic causes underflow and panic in golang.org/x/crypto/ssh

  GO-2026-5014: Invoking bypass of certificate restrictions in golang.org/x/crypto/ssh

  GO-2026-5015: Invoking server panic during CheckHostKey/Authenticate in golang.org/x/crypto/ssh

  GO-2026-5016: Invoking memory leak when rejecting channels can lead to DoS in golang.org/x/crypto/ssh

  GO-2026-5017: Invoking client can cause server deadlock on unexpected responses in golang.org/x/crypto/ssh

  GO-2026-5018: Invoking pathological RSA/DSA parameters may cause DoS in golang.org/x/crypto/ssh

  GO-2026-5019: Invoking bypass of FIDO/U2F security keys physical interaction in golang.org/x/crypto/ssh

  GO-2026-5020: Invoking infinite loop on large channel writes in golang.org/x/crypto/ssh

  GO-2026-5021: Invoking auth bypass via unenforced @revoked status in golang.org/x/crypto/ssh/knownhosts

  GO-2026-5023: Invoking VerifiedPublicKeyCallback permissions skip enforcement in golang.org/x/crypto/ssh

  GO-2026-5033: Invoking pathological inputs can lead to client panic in golang.org/x/crypto/ssh/agent

  GO-2026-5932: The golang.org/x/crypto/openpgp package is unmaintained, unsafe by design, and has known security issues

  GO-2026-6303: Source-address critical option not enforced for non-public-key auth callbacks in golang.org/x/crypto/ssh

  GO-2026-6354: Prevent DoS on deadlocked undecided channel in golang.org/x/crypto/ssh

  GO-2026-6355: Prevent DoS on deadlocked established channel in golang.org/x/crypto/ssh

Mar 5, 2023 GO-2023-2402 +22 more

  GO-2023-2402: Man-in-the-middle attacker can compromise integrity of secure channel in golang.org/x/crypto

  GO-2024-3321: Misuse of connection.serverAuthenticate may cause authorization bypass in golang.org/x/crypto

  GO-2025-3487: Potential denial of service in golang.org/x/crypto

  GO-2025-4116: Potential denial of service in golang.org/x/crypto/ssh/agent

  GO-2025-4134: Unbounded memory consumption in golang.org/x/crypto/ssh

  GO-2025-4135: Malformed constraint may cause denial of service in golang.org/x/crypto/ssh/agent

  GO-2026-5005: Invoking key constraints not enforced in golang.org/x/crypto/ssh/agent

  GO-2026-5006: Invoking agent constraints dropped when forwarding keys in golang.org/x/crypto/ssh/agent

  GO-2026-5013: Invoking byte arithmetic causes underflow and panic in golang.org/x/crypto/ssh

  GO-2026-5014: Invoking bypass of certificate restrictions in golang.org/x/crypto/ssh

  GO-2026-5015: Invoking server panic during CheckHostKey/Authenticate in golang.org/x/crypto/ssh

  GO-2026-5016: Invoking memory leak when rejecting channels can lead to DoS in golang.org/x/crypto/ssh

  GO-2026-5017: Invoking client can cause server deadlock on unexpected responses in golang.org/x/crypto/ssh

  GO-2026-5018: Invoking pathological RSA/DSA parameters may cause DoS in golang.org/x/crypto/ssh

  GO-2026-5019: Invoking bypass of FIDO/U2F security keys physical interaction in golang.org/x/crypto/ssh

  GO-2026-5020: Invoking infinite loop on large channel writes in golang.org/x/crypto/ssh

  GO-2026-5021: Invoking auth bypass via unenforced @revoked status in golang.org/x/crypto/ssh/knownhosts

  GO-2026-5023: Invoking VerifiedPublicKeyCallback permissions skip enforcement in golang.org/x/crypto/ssh

  GO-2026-5033: Invoking pathological inputs can lead to client panic in golang.org/x/crypto/ssh/agent

  GO-2026-5932: The golang.org/x/crypto/openpgp package is unmaintained, unsafe by design, and has known security issues

  GO-2026-6303: Source-address critical option not enforced for non-public-key auth callbacks in golang.org/x/crypto/ssh

  GO-2026-6354: Prevent DoS on deadlocked undecided channel in golang.org/x/crypto/ssh

  GO-2026-6355: Prevent DoS on deadlocked established channel in golang.org/x/crypto/ssh

Feb 8, 2023 GO-2023-2402 +22 more

  GO-2023-2402: Man-in-the-middle attacker can compromise integrity of secure channel in golang.org/x/crypto

  GO-2024-3321: Misuse of connection.serverAuthenticate may cause authorization bypass in golang.org/x/crypto

  GO-2025-3487: Potential denial of service in golang.org/x/crypto

  GO-2025-4116: Potential denial of service in golang.org/x/crypto/ssh/agent

  GO-2025-4134: Unbounded memory consumption in golang.org/x/crypto/ssh

  GO-2025-4135: Malformed constraint may cause denial of service in golang.org/x/crypto/ssh/agent

  GO-2026-5005: Invoking key constraints not enforced in golang.org/x/crypto/ssh/agent

  GO-2026-5006: Invoking agent constraints dropped when forwarding keys in golang.org/x/crypto/ssh/agent

  GO-2026-5013: Invoking byte arithmetic causes underflow and panic in golang.org/x/crypto/ssh

  GO-2026-5014: Invoking bypass of certificate restrictions in golang.org/x/crypto/ssh

  GO-2026-5015: Invoking server panic during CheckHostKey/Authenticate in golang.org/x/crypto/ssh

  GO-2026-5016: Invoking memory leak when rejecting channels can lead to DoS in golang.org/x/crypto/ssh

  GO-2026-5017: Invoking client can cause server deadlock on unexpected responses in golang.org/x/crypto/ssh

  GO-2026-5018: Invoking pathological RSA/DSA parameters may cause DoS in golang.org/x/crypto/ssh

  GO-2026-5019: Invoking bypass of FIDO/U2F security keys physical interaction in golang.org/x/crypto/ssh

  GO-2026-5020: Invoking infinite loop on large channel writes in golang.org/x/crypto/ssh

  GO-2026-5021: Invoking auth bypass via unenforced @revoked status in golang.org/x/crypto/ssh/knownhosts

  GO-2026-5023: Invoking VerifiedPublicKeyCallback permissions skip enforcement in golang.org/x/crypto/ssh

  GO-2026-5033: Invoking pathological inputs can lead to client panic in golang.org/x/crypto/ssh/agent

  GO-2026-5932: The golang.org/x/crypto/openpgp package is unmaintained, unsafe by design, and has known security issues

  GO-2026-6303: Source-address critical option not enforced for non-public-key auth callbacks in golang.org/x/crypto/ssh

  GO-2026-6354: Prevent DoS on deadlocked undecided channel in golang.org/x/crypto/ssh

  GO-2026-6355: Prevent DoS on deadlocked established channel in golang.org/x/crypto/ssh

Jan 4, 2023 GO-2023-2402 +22 more

  GO-2023-2402: Man-in-the-middle attacker can compromise integrity of secure channel in golang.org/x/crypto

  GO-2024-3321: Misuse of connection.serverAuthenticate may cause authorization bypass in golang.org/x/crypto

  GO-2025-3487: Potential denial of service in golang.org/x/crypto

  GO-2025-4116: Potential denial of service in golang.org/x/crypto/ssh/agent

  GO-2025-4134: Unbounded memory consumption in golang.org/x/crypto/ssh

  GO-2025-4135: Malformed constraint may cause denial of service in golang.org/x/crypto/ssh/agent

  GO-2026-5005: Invoking key constraints not enforced in golang.org/x/crypto/ssh/agent

  GO-2026-5006: Invoking agent constraints dropped when forwarding keys in golang.org/x/crypto/ssh/agent

  GO-2026-5013: Invoking byte arithmetic causes underflow and panic in golang.org/x/crypto/ssh

  GO-2026-5014: Invoking bypass of certificate restrictions in golang.org/x/crypto/ssh

  GO-2026-5015: Invoking server panic during CheckHostKey/Authenticate in golang.org/x/crypto/ssh

  GO-2026-5016: Invoking memory leak when rejecting channels can lead to DoS in golang.org/x/crypto/ssh

  GO-2026-5017: Invoking client can cause server deadlock on unexpected responses in golang.org/x/crypto/ssh

  GO-2026-5018: Invoking pathological RSA/DSA parameters may cause DoS in golang.org/x/crypto/ssh

  GO-2026-5019: Invoking bypass of FIDO/U2F security keys physical interaction in golang.org/x/crypto/ssh

  GO-2026-5020: Invoking infinite loop on large channel writes in golang.org/x/crypto/ssh

  GO-2026-5021: Invoking auth bypass via unenforced @revoked status in golang.org/x/crypto/ssh/knownhosts

  GO-2026-5023: Invoking VerifiedPublicKeyCallback permissions skip enforcement in golang.org/x/crypto/ssh

  GO-2026-5033: Invoking pathological inputs can lead to client panic in golang.org/x/crypto/ssh/agent

  GO-2026-5932: The golang.org/x/crypto/openpgp package is unmaintained, unsafe by design, and has known security issues

  GO-2026-6303: Source-address critical option not enforced for non-public-key auth callbacks in golang.org/x/crypto/ssh

  GO-2026-6354: Prevent DoS on deadlocked undecided channel in golang.org/x/crypto/ssh

  GO-2026-6355: Prevent DoS on deadlocked established channel in golang.org/x/crypto/ssh

Dec 6, 2022 GO-2023-2402 +22 more

  GO-2023-2402: Man-in-the-middle attacker can compromise integrity of secure channel in golang.org/x/crypto

  GO-2024-3321: Misuse of connection.serverAuthenticate may cause authorization bypass in golang.org/x/crypto

  GO-2025-3487: Potential denial of service in golang.org/x/crypto

  GO-2025-4116: Potential denial of service in golang.org/x/crypto/ssh/agent

  GO-2025-4134: Unbounded memory consumption in golang.org/x/crypto/ssh

  GO-2025-4135: Malformed constraint may cause denial of service in golang.org/x/crypto/ssh/agent

  GO-2026-5005: Invoking key constraints not enforced in golang.org/x/crypto/ssh/agent

  GO-2026-5006: Invoking agent constraints dropped when forwarding keys in golang.org/x/crypto/ssh/agent

  GO-2026-5013: Invoking byte arithmetic causes underflow and panic in golang.org/x/crypto/ssh

  GO-2026-5014: Invoking bypass of certificate restrictions in golang.org/x/crypto/ssh

  GO-2026-5015: Invoking server panic during CheckHostKey/Authenticate in golang.org/x/crypto/ssh

  GO-2026-5016: Invoking memory leak when rejecting channels can lead to DoS in golang.org/x/crypto/ssh

  GO-2026-5017: Invoking client can cause server deadlock on unexpected responses in golang.org/x/crypto/ssh

  GO-2026-5018: Invoking pathological RSA/DSA parameters may cause DoS in golang.org/x/crypto/ssh

  GO-2026-5019: Invoking bypass of FIDO/U2F security keys physical interaction in golang.org/x/crypto/ssh

  GO-2026-5020: Invoking infinite loop on large channel writes in golang.org/x/crypto/ssh

  GO-2026-5021: Invoking auth bypass via unenforced @revoked status in golang.org/x/crypto/ssh/knownhosts

  GO-2026-5023: Invoking VerifiedPublicKeyCallback permissions skip enforcement in golang.org/x/crypto/ssh

  GO-2026-5033: Invoking pathological inputs can lead to client panic in golang.org/x/crypto/ssh/agent

  GO-2026-5932: The golang.org/x/crypto/openpgp package is unmaintained, unsafe by design, and has known security issues

  GO-2026-6303: Source-address critical option not enforced for non-public-key auth callbacks in golang.org/x/crypto/ssh

  GO-2026-6354: Prevent DoS on deadlocked undecided channel in golang.org/x/crypto/ssh

  GO-2026-6355: Prevent DoS on deadlocked established channel in golang.org/x/crypto/ssh

Nov 16, 2022 GO-2023-2402 +22 more

  GO-2023-2402: Man-in-the-middle attacker can compromise integrity of secure channel in golang.org/x/crypto

  GO-2024-3321: Misuse of connection.serverAuthenticate may cause authorization bypass in golang.org/x/crypto

  GO-2025-3487: Potential denial of service in golang.org/x/crypto

  GO-2025-4116: Potential denial of service in golang.org/x/crypto/ssh/agent

  GO-2025-4134: Unbounded memory consumption in golang.org/x/crypto/ssh

  GO-2025-4135: Malformed constraint may cause denial of service in golang.org/x/crypto/ssh/agent

  GO-2026-5005: Invoking key constraints not enforced in golang.org/x/crypto/ssh/agent

  GO-2026-5006: Invoking agent constraints dropped when forwarding keys in golang.org/x/crypto/ssh/agent

  GO-2026-5013: Invoking byte arithmetic causes underflow and panic in golang.org/x/crypto/ssh

  GO-2026-5014: Invoking bypass of certificate restrictions in golang.org/x/crypto/ssh

  GO-2026-5015: Invoking server panic during CheckHostKey/Authenticate in golang.org/x/crypto/ssh

  GO-2026-5016: Invoking memory leak when rejecting channels can lead to DoS in golang.org/x/crypto/ssh

  GO-2026-5017: Invoking client can cause server deadlock on unexpected responses in golang.org/x/crypto/ssh

  GO-2026-5018: Invoking pathological RSA/DSA parameters may cause DoS in golang.org/x/crypto/ssh

  GO-2026-5019: Invoking bypass of FIDO/U2F security keys physical interaction in golang.org/x/crypto/ssh

  GO-2026-5020: Invoking infinite loop on large channel writes in golang.org/x/crypto/ssh

  GO-2026-5021: Invoking auth bypass via unenforced @revoked status in golang.org/x/crypto/ssh/knownhosts

  GO-2026-5023: Invoking VerifiedPublicKeyCallback permissions skip enforcement in golang.org/x/crypto/ssh

  GO-2026-5033: Invoking pathological inputs can lead to client panic in golang.org/x/crypto/ssh/agent

  GO-2026-5932: The golang.org/x/crypto/openpgp package is unmaintained, unsafe by design, and has known security issues

  GO-2026-6303: Source-address critical option not enforced for non-public-key auth callbacks in golang.org/x/crypto/ssh

  GO-2026-6354: Prevent DoS on deadlocked undecided channel in golang.org/x/crypto/ssh

  GO-2026-6355: Prevent DoS on deadlocked established channel in golang.org/x/crypto/ssh

Nov 8, 2022 GO-2023-2402 +22 more

  GO-2023-2402: Man-in-the-middle attacker can compromise integrity of secure channel in golang.org/x/crypto

  GO-2024-3321: Misuse of connection.serverAuthenticate may cause authorization bypass in golang.org/x/crypto

  GO-2025-3487: Potential denial of service in golang.org/x/crypto

  GO-2025-4116: Potential denial of service in golang.org/x/crypto/ssh/agent

  GO-2025-4134: Unbounded memory consumption in golang.org/x/crypto/ssh

  GO-2025-4135: Malformed constraint may cause denial of service in golang.org/x/crypto/ssh/agent

  GO-2026-5005: Invoking key constraints not enforced in golang.org/x/crypto/ssh/agent

  GO-2026-5006: Invoking agent constraints dropped when forwarding keys in golang.org/x/crypto/ssh/agent

  GO-2026-5013: Invoking byte arithmetic causes underflow and panic in golang.org/x/crypto/ssh

  GO-2026-5014: Invoking bypass of certificate restrictions in golang.org/x/crypto/ssh

  GO-2026-5015: Invoking server panic during CheckHostKey/Authenticate in golang.org/x/crypto/ssh

  GO-2026-5016: Invoking memory leak when rejecting channels can lead to DoS in golang.org/x/crypto/ssh

  GO-2026-5017: Invoking client can cause server deadlock on unexpected responses in golang.org/x/crypto/ssh

  GO-2026-5018: Invoking pathological RSA/DSA parameters may cause DoS in golang.org/x/crypto/ssh

  GO-2026-5019: Invoking bypass of FIDO/U2F security keys physical interaction in golang.org/x/crypto/ssh

  GO-2026-5020: Invoking infinite loop on large channel writes in golang.org/x/crypto/ssh

  GO-2026-5021: Invoking auth bypass via unenforced @revoked status in golang.org/x/crypto/ssh/knownhosts

  GO-2026-5023: Invoking VerifiedPublicKeyCallback permissions skip enforcement in golang.org/x/crypto/ssh

  GO-2026-5033: Invoking pathological inputs can lead to client panic in golang.org/x/crypto/ssh/agent

  GO-2026-5932: The golang.org/x/crypto/openpgp package is unmaintained, unsafe by design, and has known security issues

  GO-2026-6303: Source-address critical option not enforced for non-public-key auth callbacks in golang.org/x/crypto/ssh

  GO-2026-6354: Prevent DoS on deadlocked undecided channel in golang.org/x/crypto/ssh

  GO-2026-6355: Prevent DoS on deadlocked established channel in golang.org/x/crypto/ssh

Oct 19, 2022 GO-2023-2402 +22 more

  GO-2023-2402: Man-in-the-middle attacker can compromise integrity of secure channel in golang.org/x/crypto

  GO-2024-3321: Misuse of connection.serverAuthenticate may cause authorization bypass in golang.org/x/crypto

  GO-2025-3487: Potential denial of service in golang.org/x/crypto

  GO-2025-4116: Potential denial of service in golang.org/x/crypto/ssh/agent

  GO-2025-4134: Unbounded memory consumption in golang.org/x/crypto/ssh

  GO-2025-4135: Malformed constraint may cause denial of service in golang.org/x/crypto/ssh/agent

  GO-2026-5005: Invoking key constraints not enforced in golang.org/x/crypto/ssh/agent

  GO-2026-5006: Invoking agent constraints dropped when forwarding keys in golang.org/x/crypto/ssh/agent

  GO-2026-5013: Invoking byte arithmetic causes underflow and panic in golang.org/x/crypto/ssh

  GO-2026-5014: Invoking bypass of certificate restrictions in golang.org/x/crypto/ssh

  GO-2026-5015: Invoking server panic during CheckHostKey/Authenticate in golang.org/x/crypto/ssh

  GO-2026-5016: Invoking memory leak when rejecting channels can lead to DoS in golang.org/x/crypto/ssh

  GO-2026-5017: Invoking client can cause server deadlock on unexpected responses in golang.org/x/crypto/ssh

  GO-2026-5018: Invoking pathological RSA/DSA parameters may cause DoS in golang.org/x/crypto/ssh

  GO-2026-5019: Invoking bypass of FIDO/U2F security keys physical interaction in golang.org/x/crypto/ssh

  GO-2026-5020: Invoking infinite loop on large channel writes in golang.org/x/crypto/ssh

  GO-2026-5021: Invoking auth bypass via unenforced @revoked status in golang.org/x/crypto/ssh/knownhosts

  GO-2026-5023: Invoking VerifiedPublicKeyCallback permissions skip enforcement in golang.org/x/crypto/ssh

  GO-2026-5033: Invoking pathological inputs can lead to client panic in golang.org/x/crypto/ssh/agent

  GO-2026-5932: The golang.org/x/crypto/openpgp package is unmaintained, unsafe by design, and has known security issues

  GO-2026-6303: Source-address critical option not enforced for non-public-key auth callbacks in golang.org/x/crypto/ssh

  GO-2026-6354: Prevent DoS on deadlocked undecided channel in golang.org/x/crypto/ssh

  GO-2026-6355: Prevent DoS on deadlocked established channel in golang.org/x/crypto/ssh