Skip to main content
cve.nowby Sazabi
← Go
GoPackage

golang.org/x/crypto

32 known vulnerabilities (8 critical, 8 high, 7 medium), with the versions each affects and the releases that fix them.

Latest release
v0.58.0 (Oct 9, 2026): affected by GO-2026-5932
Newest unaffected release
Every release is affected by at least one advisory
Advisories
32 · 8 critical, 8 high, 7 medium
Releases
58 since v0.1.0 (Oct 19, 2022)
Registry
pkg.go.dev
Releases read
Nov 8, 2026

Version timeline

Show all 32 advisoriesShow fewer advisories
  • CVE-2026-39835
    Affects v0.1.0 to v0.51.0 (v0.52.0 is outside it)
  • CVE-2026-39828
    Affects v0.1.0 to v0.51.0 (v0.52.0 is outside it)
  • CVE-2026-46597
    Affects v0.1.0 to v0.51.0 (v0.52.0 is outside it)
  • CVE-2026-39832
    Affects v0.1.0 to v0.51.0 (v0.52.0 is outside it)
  • CVE-2026-39833
    Affects v0.1.0 to v0.51.0 (v0.52.0 is outside it)
  • CVE-2025-47914
    Affects v0.1.0 to v0.44.0 (v0.45.0 is outside it)
  • CVE-2025-58181
    Affects v0.1.0 to v0.44.0 (v0.45.0 is outside it)
  • CVE-2025-47913
    Affects v0.1.0 to v0.42.0 (v0.43.0 is outside it)
  • CVE-2025-22869
    Affects v0.1.0 to v0.34.0 (v0.35.0 is outside it)
  • CVE-2024-45337
    Affects v0.1.0 to v0.30.0 (v0.31.0 is outside it)
  • CVE-2022-30636
    No published release is affected
    No published release is affected
  • CVE-2023-48795
    Affects v0.1.0 to v0.16.0 (v0.17.0 is outside it)
  • CVE-2021-43565
    No published release is affected
    No published release is affected
  • CVE-2022-27191
    No published release is affected
    No published release is affected
  • CVE-2020-29652
    No published release is affected
    No published release is affected
  • CVE-2020-7919
    No published release is affected
    No published release is affected
  • CVE-2020-9283
    No published release is affected
    No published release is affected
  • CVE-2019-11841
    No published release is affected
    No published release is affected
  • CVE-2019-11840
    No published release is affected
    No published release is affected
  • CVE-2017-3204
    No published release is affected
    No published release is affected
Every release cve.now has on record, lowest version on the left; each bar is a run of versions an advisory affects.

Advisories 32

  • Prevent DoS on deadlocked established channel in golang.org/x/crypto/ssh

    Affected: fixed in 0.56.0.

    Fixed in v0.56.0 (released Sep 2, 2026, the day of disclosure).

    The latest release, v0.58.0, is not affected.

  • Prevent DoS on deadlocked undecided channel in golang.org/x/crypto/ssh

    Affected: fixed in 0.56.0.

    Fixed in v0.56.0 (released Sep 2, 2026, the day of disclosure).

    The latest release, v0.58.0, is not affected.

  • Source-address critical option not enforced for non-public-key auth callbacks in golang.org/x/crypto/ssh

    Affected: fixed in 0.55.0.

    Fixed in v0.55.0 (released Aug 11, 2026, 17 days before disclosure).

    The latest release, v0.58.0, is not affected.

  • The golang.org/x/crypto/openpgp package is unmaintained, unsafe by design, and has known security issues

    Affected: all versions.

    No fix released. The latest release, v0.58.0, is still affected.

  • CVE-2026-46598Medium 5.3

    Invoking pathological inputs can lead to client panic in golang.org/x/crypto/ssh/agent

    Affected: fixed in 0.52.0.

    Fixed in v0.52.0 (released May 22, 2026, the day of disclosure).

    The latest release, v0.58.0, is not affected.

  • CVE-2026-46595Critical 10.0

    Invoking VerifiedPublicKeyCallback permissions skip enforcement in golang.org/x/crypto/ssh

    Affected: fixed in 0.52.0.

    Fixed in v0.52.0 (released May 22, 2026, the day of disclosure).

    The latest release, v0.58.0, is not affected.

  • CVE-2026-42508Critical 9.1

    Invoking auth bypass via unenforced @revoked status in golang.org/x/crypto/ssh/knownhosts

    Affected: fixed in 0.52.0.

    Fixed in v0.52.0 (released May 22, 2026, the day of disclosure).

    The latest release, v0.58.0, is not affected.

  • CVE-2026-39834Critical 9.1

    Invoking infinite loop on large channel writes in golang.org/x/crypto/ssh

    Affected: fixed in 0.52.0.

    Fixed in v0.52.0 (released May 22, 2026, the day of disclosure).

    The latest release, v0.58.0, is not affected.

  • CVE-2026-39831Critical 9.1

    Invoking bypass of FIDO/U2F security keys physical interaction in golang.org/x/crypto/ssh

    Affected: fixed in 0.52.0.

    Fixed in v0.52.0 (released May 22, 2026, the day of disclosure).

    The latest release, v0.58.0, is not affected.

  • Invoking pathological RSA/DSA parameters may cause DoS in golang.org/x/crypto/ssh

    Affected: fixed in 0.52.0.

    Fixed in v0.52.0 (released May 22, 2026, the day of disclosure).

    The latest release, v0.58.0, is not affected.

  • CVE-2026-39830Critical 9.1

    Invoking client can cause server deadlock on unexpected responses in golang.org/x/crypto/ssh

    Affected: fixed in 0.52.0.

    Fixed in v0.52.0 (released May 22, 2026, the day of disclosure).

    The latest release, v0.58.0, is not affected.

  • CVE-2026-39827Medium 6.5

    Invoking memory leak when rejecting channels can lead to DoS in golang.org/x/crypto/ssh

    Affected: fixed in 0.52.0.

    Fixed in v0.52.0 (released May 22, 2026, the day of disclosure).

    The latest release, v0.58.0, is not affected.

  • CVE-2026-39835Medium 5.3

    Invoking server panic during CheckHostKey/Authenticate in golang.org/x/crypto/ssh

    Affected: fixed in 0.52.0.

    Fixed in v0.52.0 (released May 22, 2026, the day of disclosure).

    The latest release, v0.58.0, is not affected.

  • CVE-2026-39828Medium 6.3

    Invoking bypass of certificate restrictions in golang.org/x/crypto/ssh

    Affected: fixed in 0.52.0.

    Fixed in v0.52.0 (released May 22, 2026, the day of disclosure).

    The latest release, v0.58.0, is not affected.

  • Invoking byte arithmetic causes underflow and panic in golang.org/x/crypto/ssh

    Affected: fixed in 0.52.0.

    Fixed in v0.52.0 (released May 22, 2026, the day of disclosure).

    The latest release, v0.58.0, is not affected.

Show all 32 advisoriesShow fewer advisories
  • CVE-2026-39832Critical 9.1

    Invoking agent constraints dropped when forwarding keys in golang.org/x/crypto/ssh/agent

    Affected: fixed in 0.52.0.

    Fixed in v0.52.0 (released May 22, 2026, the day of disclosure).

    The latest release, v0.58.0, is not affected.

  • CVE-2026-39833Critical 9.1

    Invoking key constraints not enforced in golang.org/x/crypto/ssh/agent

    Affected: fixed in 0.52.0.

    Fixed in v0.52.0 (released May 22, 2026, the day of disclosure).

    The latest release, v0.58.0, is not affected.

  • CVE-2025-47914Medium 5.3

    Malformed constraint may cause denial of service in golang.org/x/crypto/ssh/agent

    Affected: fixed in 0.45.0.

    Fixed in v0.45.0 (released Nov 19, 2025, the day of disclosure).

    The latest release, v0.58.0, is not affected.

  • CVE-2025-58181Medium 5.3

    Unbounded memory consumption in golang.org/x/crypto/ssh

    Affected: fixed in 0.45.0.

    Fixed in v0.45.0 (released Nov 19, 2025, the day of disclosure).

    The latest release, v0.58.0, is not affected.

  • Potential denial of service in golang.org/x/crypto/ssh/agent

    Affected: fixed in 0.43.0.

    Fixed in v0.43.0 (released Oct 8, 2025, 36 days before disclosure).

    The latest release, v0.58.0, is not affected.

  • Potential denial of service in golang.org/x/crypto

    Affected: fixed in 0.35.0.

    Fixed in v0.35.0 (released Feb 24, 2025, 2 days before disclosure).

    The latest release, v0.58.0, is not affected.

  • CVE-2024-45337Critical 9.1

    Misuse of connection.serverAuthenticate may cause authorization bypass in golang.org/x/crypto

    Affected: fixed in 0.31.0.

    Fixed in v0.31.0 (released Dec 11, 2024, the day of disclosure).

    The latest release, v0.58.0, is not affected.

  • Limited directory traversal vulnerability on Windows in golang.org/x/crypto

    Affected: fixed in 0.0.0-20220525230936-793ad666bf5e.

    Fixed in v0.1.0 (released Oct 19, 2022, 622 days before disclosure, the advisory names 0.0.0-20220525230936-793ad666bf5e, which was never published).

    The latest release, v0.58.0, is not affected.

  • CVE-2023-48795Medium 5.9

    The SSH transport protocol with certain OpenSSH extensions, found in OpenSSH before 9.6 and other products, allows remote attackers to bypas

    Affected: from 0.1.0, fixed in 0.17.0; fixed in 0.0.0-20231218163308-9d2ee975ef9f; fixed in 0.17.0.

    Fixed in v0.17.0 (released Dec 18, 2023, the day of disclosure).

    The latest release, v0.58.0, is not affected.

  • The x/crypto/ssh package before 0.0.0-20211202192323-5770296d904e of golang.org/x/crypto allows an attacker to panic an SSH server.

    Affected: fixed in 0.0.0-20211202192323-5770296d904e.

    Fixed in v0.1.0 (released Oct 19, 2022, 43 days after disclosure, the advisory names 0.0.0-20211202192323-5770296d904e, which was never published).

    The latest release, v0.58.0, is not affected.

  • The golang.org/x/crypto/ssh package before 0.0.0-20220314234659-1baeb1ce4c0b for Go allows an attacker to crash a server in certain…

    Affected: fixed in 0.0.0-20220314234659-1baeb1ce4c0b.

    Fixed in v0.1.0 (released Oct 19, 2022, 215 days after disclosure, the advisory names 0.0.0-20220314234659-1baeb1ce4c0b, which was never published).

    The latest release, v0.58.0, is not affected.

  • A nil pointer dereference in the golang.org/x/crypto/ssh component through v0.0.0-20201203163018-be400aefbc4c for Go allows remote…

    Affected: fixed in 0.0.0-20201216223049-8b5274cf687f.

    Fixed in v0.1.0 (released Oct 19, 2022, 671 days after disclosure, the advisory names 0.0.0-20201216223049-8b5274cf687f, which was never published).

    The latest release, v0.58.0, is not affected.

  • Go before 1.12.16 and 1.13.x before 1.13.7 (and the crypto/cryptobyte package before 0.0.0-20200124225646-8b5121be2f68 for Go) allows…

    Affected: fixed in 0.0.0-20200124225646-8b5121be2f68.

    Fixed in v0.1.0 (released Oct 19, 2022, 947 days after disclosure, the advisory names 0.0.0-20200124225646-8b5121be2f68, which was never published).

    The latest release, v0.58.0, is not affected.

  • golang.org/x/crypto before v0.0.0-20200220183623-bac4c82f6975 for Go allows a panic during signature verification in the…

    Affected: fixed in 0.0.0-20200220183623-bac4c82f6975.

    Fixed in v0.1.0 (released Oct 19, 2022, 972 days after disclosure, the advisory names 0.0.0-20200220183623-bac4c82f6975, which was never published).

    The latest release, v0.58.0, is not affected.

  • A message-forgery issue was discovered in crypto/openpgp/clearsign/clearsign.go in supplementary Go cryptography libraries 2019-03-25.

    Affected: fixed in 0.0.0-20190424203555-c05e17bb3b2d.

    Fixed in v0.1.0 (released Oct 19, 2022, 1246 days after disclosure, the advisory names 0.0.0-20190424203555-c05e17bb3b2d, which was never published).

    The latest release, v0.58.0, is not affected.

  • An issue was discovered in the supplementary Go cryptography library, golang.org/x/crypto, before v0.0.0-20190320223903-b7391e95e576.

    Affected: fixed in 0.0.0-20190320223903-b7391e95e576.

    Fixed in v0.1.0 (released Oct 19, 2022, 1259 days after disclosure, the advisory names 0.0.0-20190320223903-b7391e95e576, which was never published).

    The latest release, v0.58.0, is not affected.

  • The Go SSH library (x/crypto/ssh) by default does not verify host keys, facilitating man-in-the-middle attacks.

    Affected: fixed in 0.0.0-20170330155735-e4e2799dd7aa.

    Fixed in v0.1.0 (released Oct 19, 2022, 2024 days after disclosure, the advisory names 0.0.0-20170330155735-e4e2799dd7aa, which was never published).

    The latest release, v0.58.0, is not affected.