MEDIUM5.3
GHSA-9m57-25v3-79x9
golang.org/x/crypto: Invoking pathological inputs can lead to client panic
Quick fix
GHSA-9m57-25v3-79x9 — golang.org/x/crypto: upgrade to the fixed version with the command below.
go get golang.org/x/crypto@v0.52.0Details
For certain crafted inputs, a 'ed25519.PrivateKey' was created by casting malformed wire bytes, leading to a panic when used.
Are you affected?
Enter the version of the package you're using.