HIGH 7.5
GHSA-56w8-48fp-6mgv
golang.org/x/crypto/ssh/agent has a potential denial of service
Details
SSH clients receiving SSH_AGENT_SUCCESS when expecting a typed response will panic and cause early termination of the client process.
Are you affected?
Enter the version of the package you're using.
Affected packages
Go / golang.org/x/crypto/ssh/agent
Introduced in:
0 Fixed in: 0.43.0 Fix
go get golang.org/x/crypto/ssh/agent@v0.43.0 References
- https://nvd.nist.gov/vuln/detail/CVE-2025-47913 [ADVISORY]
- https://github.com/golang/crypto [PACKAGE]
- https://go.dev/cl/700295 [WEB]
- https://go.dev/issue/75178 [WEB]
- https://pkg.go.dev/vuln/GO-2025-4116 [WEB]