—
GO-2026-5013
Invoking byte arithmetic causes underflow and panic in golang.org/x/crypto/ssh
Details
An incorrectly placed cast from bytes to int allowed for server-side panic in the AES-GCM packet decoder for well-crafted inputs.
Are you affected?
Enter the version of the package you're using.