Go/golang.org/x/crypto

golang.org/x/crypto/ssh NULL Pointer Dereference vulnerability

Modified: 9/10/2026

golang.org/x/crypto vulnerable to invoking bypass of certificate restrictions

Modified: 9/10/2026

Prefix Truncation Attack against ChaCha20-Poly1305 and Encrypt-then-MAC aka Terrapin

Modified: 9/10/2026

golang.org/x/crypto vulnerable to auth bypass via unenforced @revoked status

Modified: 9/10/2026

golang.org/x/crypto is vulnerable to invoking server panic during CheckHostKey/Authenticate flow

Modified: 9/11/2026

golang.org/x/crypto: FIDO/U2F security key physical presence check can be bypassed

Modified: 9/10/2026

golang.org/x/crypto/ssh Denial of service via crafted Signer

Modified: 9/10/2026

golang.org/x/crypto: Invoking pathological inputs can lead to client panic

Modified: 9/10/2026

Helm uses crypto package vulnerable to panic from malformed X.509 certificate

Modified: 9/10/2026

golang.org/x/crypto doesn't drop invoking agent constraints when forwarding keys

Modified: 9/10/2026

golang.org/x/crypto/ssh/agent vulnerable to panic if message is malformed due to out of bounds read

Modified: 9/10/2026

Improper Verification of Cryptographic Signature in golang.org/x/crypto

Modified: 9/10/2026

x/crypto/ssh vulnerable to panic via malformed packets

Modified: 9/10/2026

golang.org/x/crypto Vulnerable to Denial of Service (DoS) via Slow or Incomplete Key Exchange

Modified: 9/10/2026

golang.org/x/crypto/ssh allows an attacker to cause unbounded memory consumption

Modified: 9/10/2026

golang.org/x/crypto doesn't enforce invoking key constraints

Modified: 9/10/2026

golang.org/x/crypto: Invoking byte arithmetic causes underflow and panic

Modified: 9/10/2026

golang.org/x/crypto: Invoking memory leak when rejecting channels can lead to DoS

Modified: 9/10/2026

golang.org/x/crypto/salsa20/salsa uses insufficiently random values

Modified: 9/10/2026

golang.org/x/crypto vulnerable to infinite loop on large channel writes

Modified: 9/10/2026

Misuse of ServerConfig.PublicKeyCallback may cause authorization bypass in golang.org/x/crypto

Modified: 9/10/2026

golang.org/x/crypto: Invoking client can cause server deadlock on unexpected responses

Modified: 9/15/2026

golang.org/x/crypto: Invoking pathological RSA/DSA parameters may cause DoS

Modified: 9/10/2026

Golang/x/crypto message forgery vulnerability

Modified: 9/10/2026

golang.org/x/crypto: Invoking VerifiedPublicKeyCallback permissions skip enforcement

Modified: 9/10/2026

golang.org/x/crypto/ssh Man-in-the-Middle attack

Modified: 4/19/2024

Panic due to improper verification of cryptographic signatures in golang.org/x/crypto/ssh

Modified: 2/4/2026

Man-in-the-middle attack in golang.org/x/crypto/ssh

Modified: 5/20/2024

Panic on crafted authentication request message in golang.org/x/crypto/ssh

Modified: 2/4/2026

Denial of service via crafted Signer in golang.org/x/crypto/ssh

Modified: 2/4/2026

Insufficiently random values in golang.org/x/crypto/salsa20

Modified: 2/4/2026

Panic in certificate parsing in crypto/x509 and golang.org/x/crypto/cryptobyte

Modified: 2/4/2026

Panic on malformed packets in golang.org/x/crypto/ssh

Modified: 2/4/2026

Misleading message verification in golang.org/x/crypto/openpgp/clearsign

Modified: 2/4/2026

Man-in-the-middle attacker can compromise integrity of secure channel in golang.org/x/crypto

Modified: 7/7/2026

Limited directory traversal vulnerability on Windows in golang.org/x/crypto

Modified: 6/16/2026

Misuse of connection.serverAuthenticate may cause authorization bypass in golang.org/x/crypto

Modified: 8/8/2026

Potential denial of service in golang.org/x/crypto

Modified: 2/5/2026

Potential denial of service in golang.org/x/crypto/ssh/agent

Modified: 5/21/2026

Unbounded memory consumption in golang.org/x/crypto/ssh

Modified: 5/15/2026

Malformed constraint may cause denial of service in golang.org/x/crypto/ssh/agent

Modified: 5/15/2026

Invoking key constraints not enforced in golang.org/x/crypto/ssh/agent

Modified: 8/11/2026

Invoking agent constraints dropped when forwarding keys in golang.org/x/crypto/ssh/agent

Modified: 9/15/2026

Invoking byte arithmetic causes underflow and panic in golang.org/x/crypto/ssh

Modified: 9/17/2026

Invoking bypass of certificate restrictions in golang.org/x/crypto/ssh

Modified: 7/17/2026

Invoking server panic during CheckHostKey/Authenticate in golang.org/x/crypto/ssh

Modified: 9/22/2026

Invoking memory leak when rejecting channels can lead to DoS in golang.org/x/crypto/ssh

Modified: 9/22/2026

Invoking client can cause server deadlock on unexpected responses in golang.org/x/crypto/ssh

Modified: 9/23/2026

Invoking pathological RSA/DSA parameters may cause DoS in golang.org/x/crypto/ssh

Modified: 9/15/2026

Invoking bypass of FIDO/U2F security keys physical interaction in golang.org/x/crypto/ssh

Modified: 9/17/2026

Invoking infinite loop on large channel writes in golang.org/x/crypto/ssh

Modified: 9/22/2026

Invoking auth bypass via unenforced @revoked status in golang.org/x/crypto/ssh/knownhosts

Modified: 9/15/2026

Invoking VerifiedPublicKeyCallback permissions skip enforcement in golang.org/x/crypto/ssh

Modified: 7/17/2026

Invoking pathological inputs can lead to client panic in golang.org/x/crypto/ssh/agent

Modified: 9/22/2026

The golang.org/x/crypto/openpgp package is unmaintained, unsafe by design, and has known security issues

Modified: 7/10/2026

Source-address critical option not enforced for non-public-key auth callbacks in golang.org/x/crypto/ssh

Modified: 8/29/2026

Prevent DoS on deadlocked undecided channel in golang.org/x/crypto/ssh

Modified: 9/3/2026

Prevent DoS on deadlocked established channel in golang.org/x/crypto/ssh

Modified: 9/24/2026