HIGH7.5
GHSA-56w8-48fp-6mgv
golang.org/x/crypto/ssh/agent has a potential denial of service
Quick fix
GHSA-56w8-48fp-6mgv — golang.org/x/crypto/ssh/agent: upgrade to the fixed version with the command below.
go get golang.org/x/crypto/ssh/agent@v0.43.0Details
SSH clients receiving SSH_AGENT_SUCCESS when expecting a typed response will panic and cause early termination of the client process.
Are you affected?
Enter the version of the package you're using.
Affected packages
Go/golang.org/x/crypto/ssh/agent
Introduced in:
0Fixed in: 0.43.0Fix
go get golang.org/x/crypto/ssh/agent@v0.43.0