VDB
KO

GO-2026-5033

Invoking pathological inputs can lead to client panic in golang.org/x/crypto/ssh/agent

Details

For certain crafted inputs, a 'ed25519.PrivateKey' was created by casting malformed wire bytes, leading to a panic when used.

Are you affected?

Enter the version of the package you're using.

Affected packages

Go / golang.org/x/crypto
Introduced in: 0 Fixed in: 0.52.0
Fix go get golang.org/x/crypto@v0.52.0

References