# golang.org/x/crypto (Go) vulnerabilities

32 known vulnerabilities (8 critical, 8 high, 7 medium), with the versions each affects and the releases that fix them.

## At a glance

- Latest release: v0.58.0 (Oct 9, 2026): affected by GO-2026-5932
- Newest unaffected release: Every release is affected by at least one advisory
- Releases: 58 since v0.1.0 (Oct 19, 2022)
- Registry: https://pkg.go.dev/golang.org/x/crypto
- Releases read: Nov 8, 2026

## Version timeline

Affected versions per advisory, in version order:

- CVE-2026-56855: v0.1.0 to v0.55.0 (v0.56.0 is outside it)
- CVE-2026-78662: v0.1.0 to v0.55.0 (v0.56.0 is outside it)
- CVE-2026-56854: v0.1.0 to v0.54.0 (v0.55.0 is outside it)
- GO-2026-5932: v0.1.0 to v0.58.0 (through the newest release)
- CVE-2026-46598: v0.1.0 to v0.51.0 (v0.52.0 is outside it)
- CVE-2026-46595: v0.1.0 to v0.51.0 (v0.52.0 is outside it)
- CVE-2026-42508: v0.1.0 to v0.51.0 (v0.52.0 is outside it)
- CVE-2026-39834: v0.1.0 to v0.51.0 (v0.52.0 is outside it)
- CVE-2026-39831: v0.1.0 to v0.51.0 (v0.52.0 is outside it)
- CVE-2026-39829: v0.1.0 to v0.51.0 (v0.52.0 is outside it)
- CVE-2026-39830: v0.1.0 to v0.51.0 (v0.52.0 is outside it)
- CVE-2026-39827: v0.1.0 to v0.51.0 (v0.52.0 is outside it)
- CVE-2026-39835: v0.1.0 to v0.51.0 (v0.52.0 is outside it)
- CVE-2026-39828: v0.1.0 to v0.51.0 (v0.52.0 is outside it)
- CVE-2026-46597: v0.1.0 to v0.51.0 (v0.52.0 is outside it)
- CVE-2026-39832: v0.1.0 to v0.51.0 (v0.52.0 is outside it)
- CVE-2026-39833: v0.1.0 to v0.51.0 (v0.52.0 is outside it)
- CVE-2025-47914: v0.1.0 to v0.44.0 (v0.45.0 is outside it)
- CVE-2025-58181: v0.1.0 to v0.44.0 (v0.45.0 is outside it)
- CVE-2025-47913: v0.1.0 to v0.42.0 (v0.43.0 is outside it)
- CVE-2025-22869: v0.1.0 to v0.34.0 (v0.35.0 is outside it)
- CVE-2024-45337: v0.1.0 to v0.30.0 (v0.31.0 is outside it)
- CVE-2022-30636: no published release is affected
- CVE-2023-48795: v0.1.0 to v0.16.0 (v0.17.0 is outside it)
- CVE-2021-43565: no published release is affected
- CVE-2022-27191: no published release is affected
- CVE-2020-29652: no published release is affected
- CVE-2020-7919: no published release is affected
- CVE-2020-9283: no published release is affected
- CVE-2019-11841: no published release is affected
- CVE-2019-11840: no published release is affected
- CVE-2017-3204: no published release is affected

## Advisories (32)

### [CVE-2026-56855](https://cve.now/CVE-2026-56855): Prevent DoS on deadlocked established channel in golang.org/x/crypto/ssh

- Severity: High 7.5
- Published: Sep 2, 2026
- Affected: fixed in 0.56.0.
- Fixed in v0.56.0 (released Sep 2, 2026, the day of disclosure).
- The latest release, v0.58.0, is not affected.

### [CVE-2026-78662](https://cve.now/CVE-2026-78662): Prevent DoS on deadlocked undecided channel in golang.org/x/crypto/ssh

- Severity: High 7.5
- Published: Sep 2, 2026
- Affected: fixed in 0.56.0.
- Fixed in v0.56.0 (released Sep 2, 2026, the day of disclosure).
- The latest release, v0.58.0, is not affected.

### [CVE-2026-56854](https://cve.now/CVE-2026-56854): Source-address critical option not enforced for non-public-key auth callbacks in golang.org/x/crypto/ssh

- Severity: High 7.5
- Published: Aug 28, 2026
- Affected: fixed in 0.55.0.
- Fixed in v0.55.0 (released Aug 11, 2026, 17 days before disclosure).
- The latest release, v0.58.0, is not affected.

### [GO-2026-5932](https://cve.now/GO-2026-5932): The golang.org/x/crypto/openpgp package is unmaintained, unsafe by design, and has known security issues

- Severity: Unrated
- Published: Jul 7, 2026
- Affected: all versions.
- No fix released. The latest release, v0.58.0, is still affected.

### [CVE-2026-46598](https://cve.now/CVE-2026-46598): Invoking pathological inputs can lead to client panic in golang.org/x/crypto/ssh/agent

- Severity: Medium 5.3
- Published: May 22, 2026
- Affected: fixed in 0.52.0.
- Fixed in v0.52.0 (released May 22, 2026, the day of disclosure).
- The latest release, v0.58.0, is not affected.

### [CVE-2026-46595](https://cve.now/CVE-2026-46595): Invoking VerifiedPublicKeyCallback permissions skip enforcement in golang.org/x/crypto/ssh

- Severity: Critical 10.0
- Published: May 22, 2026
- Affected: fixed in 0.52.0.
- Fixed in v0.52.0 (released May 22, 2026, the day of disclosure).
- The latest release, v0.58.0, is not affected.

### [CVE-2026-42508](https://cve.now/CVE-2026-42508): Invoking auth bypass via unenforced @revoked status in golang.org/x/crypto/ssh/knownhosts

- Severity: Critical 9.1
- Published: May 22, 2026
- Affected: fixed in 0.52.0.
- Fixed in v0.52.0 (released May 22, 2026, the day of disclosure).
- The latest release, v0.58.0, is not affected.

### [CVE-2026-39834](https://cve.now/CVE-2026-39834): Invoking infinite loop on large channel writes in golang.org/x/crypto/ssh

- Severity: Critical 9.1
- Published: May 22, 2026
- Affected: fixed in 0.52.0.
- Fixed in v0.52.0 (released May 22, 2026, the day of disclosure).
- The latest release, v0.58.0, is not affected.

### [CVE-2026-39831](https://cve.now/CVE-2026-39831): Invoking bypass of FIDO/U2F security keys physical interaction in golang.org/x/crypto/ssh

- Severity: Critical 9.1
- Published: May 22, 2026
- Affected: fixed in 0.52.0.
- Fixed in v0.52.0 (released May 22, 2026, the day of disclosure).
- The latest release, v0.58.0, is not affected.

### [CVE-2026-39829](https://cve.now/CVE-2026-39829): Invoking pathological RSA/DSA parameters may cause DoS in golang.org/x/crypto/ssh

- Severity: High 7.5
- Published: May 22, 2026
- Affected: fixed in 0.52.0.
- Fixed in v0.52.0 (released May 22, 2026, the day of disclosure).
- The latest release, v0.58.0, is not affected.

### [CVE-2026-39830](https://cve.now/CVE-2026-39830): Invoking client can cause server deadlock on unexpected responses in golang.org/x/crypto/ssh

- Severity: Critical 9.1
- Published: May 22, 2026
- Affected: fixed in 0.52.0.
- Fixed in v0.52.0 (released May 22, 2026, the day of disclosure).
- The latest release, v0.58.0, is not affected.

### [CVE-2026-39827](https://cve.now/CVE-2026-39827): Invoking memory leak when rejecting channels can lead to DoS in golang.org/x/crypto/ssh

- Severity: Medium 6.5
- Published: May 22, 2026
- Affected: fixed in 0.52.0.
- Fixed in v0.52.0 (released May 22, 2026, the day of disclosure).
- The latest release, v0.58.0, is not affected.

### [CVE-2026-39835](https://cve.now/CVE-2026-39835): Invoking server panic during CheckHostKey/Authenticate in golang.org/x/crypto/ssh

- Severity: Medium 5.3
- Published: May 22, 2026
- Affected: fixed in 0.52.0.
- Fixed in v0.52.0 (released May 22, 2026, the day of disclosure).
- The latest release, v0.58.0, is not affected.

### [CVE-2026-39828](https://cve.now/CVE-2026-39828): Invoking bypass of certificate restrictions in golang.org/x/crypto/ssh

- Severity: Medium 6.3
- Published: May 22, 2026
- Affected: fixed in 0.52.0.
- Fixed in v0.52.0 (released May 22, 2026, the day of disclosure).
- The latest release, v0.58.0, is not affected.

### [CVE-2026-46597](https://cve.now/CVE-2026-46597): Invoking byte arithmetic causes underflow and panic in golang.org/x/crypto/ssh

- Severity: High 7.5
- Published: May 22, 2026
- Affected: fixed in 0.52.0.
- Fixed in v0.52.0 (released May 22, 2026, the day of disclosure).
- The latest release, v0.58.0, is not affected.

### [CVE-2026-39832](https://cve.now/CVE-2026-39832): Invoking agent constraints dropped when forwarding keys in golang.org/x/crypto/ssh/agent

- Severity: Critical 9.1
- Published: May 22, 2026
- Affected: fixed in 0.52.0.
- Fixed in v0.52.0 (released May 22, 2026, the day of disclosure).
- The latest release, v0.58.0, is not affected.

### [CVE-2026-39833](https://cve.now/CVE-2026-39833): Invoking key constraints not enforced in golang.org/x/crypto/ssh/agent

- Severity: Critical 9.1
- Published: May 22, 2026
- Affected: fixed in 0.52.0.
- Fixed in v0.52.0 (released May 22, 2026, the day of disclosure).
- The latest release, v0.58.0, is not affected.

### [CVE-2025-47914](https://cve.now/CVE-2025-47914): Malformed constraint may cause denial of service in golang.org/x/crypto/ssh/agent

- Severity: Medium 5.3
- Published: Nov 19, 2025
- Affected: fixed in 0.45.0.
- Fixed in v0.45.0 (released Nov 19, 2025, the day of disclosure).
- The latest release, v0.58.0, is not affected.

### [CVE-2025-58181](https://cve.now/CVE-2025-58181): Unbounded memory consumption in golang.org/x/crypto/ssh

- Severity: Medium 5.3
- Published: Nov 19, 2025
- Affected: fixed in 0.45.0.
- Fixed in v0.45.0 (released Nov 19, 2025, the day of disclosure).
- The latest release, v0.58.0, is not affected.

### [CVE-2025-47913](https://cve.now/CVE-2025-47913): Potential denial of service in golang.org/x/crypto/ssh/agent

- Severity: High 7.5
- Published: Nov 13, 2025
- Affected: fixed in 0.43.0.
- Fixed in v0.43.0 (released Oct 8, 2025, 36 days before disclosure).
- The latest release, v0.58.0, is not affected.

### [CVE-2025-22869](https://cve.now/CVE-2025-22869): Potential denial of service in golang.org/x/crypto

- Severity: High 7.5
- Published: Feb 26, 2025
- Affected: fixed in 0.35.0.
- Fixed in v0.35.0 (released Feb 24, 2025, 2 days before disclosure).
- The latest release, v0.58.0, is not affected.

### [CVE-2024-45337](https://cve.now/CVE-2024-45337): Misuse of connection.serverAuthenticate may cause authorization bypass in golang.org/x/crypto

- Severity: Critical 9.1
- Published: Dec 11, 2024
- Affected: fixed in 0.31.0.
- Fixed in v0.31.0 (released Dec 11, 2024, the day of disclosure).
- The latest release, v0.58.0, is not affected.

### [CVE-2022-30636](https://cve.now/CVE-2022-30636): Limited directory traversal vulnerability on Windows in golang.org/x/crypto

- Severity: High 7.5
- Published: Jul 2, 2024
- Affected: fixed in 0.0.0-20220525230936-793ad666bf5e.
- Fixed in v0.1.0 (released Oct 19, 2022, 622 days before disclosure, the advisory names 0.0.0-20220525230936-793ad666bf5e, which was never published).
- The latest release, v0.58.0, is not affected.

### [CVE-2023-48795](https://cve.now/CVE-2023-48795): The SSH transport protocol with certain OpenSSH extensions, found in OpenSSH before 9.6 and other products, allows remote attackers to bypas

- Severity: Medium 5.9
- Published: Dec 18, 2023
- Affected: from 0.1.0, fixed in 0.17.0; fixed in 0.0.0-20231218163308-9d2ee975ef9f; fixed in 0.17.0.
- Fixed in v0.17.0 (released Dec 18, 2023, the day of disclosure).
- The latest release, v0.58.0, is not affected.

### [CVE-2021-43565](https://cve.now/CVE-2021-43565): The x/crypto/ssh package before 0.0.0-20211202192323-5770296d904e of golang.org/x/crypto allows an attacker to panic an SSH server.

- Severity: Unrated
- Published: Sep 6, 2022
- Affected: fixed in 0.0.0-20211202192323-5770296d904e.
- Fixed in v0.1.0 (released Oct 19, 2022, 43 days after disclosure, the advisory names 0.0.0-20211202192323-5770296d904e, which was never published).
- The latest release, v0.58.0, is not affected.

### [CVE-2022-27191](https://cve.now/CVE-2022-27191): The golang.org/x/crypto/ssh package before 0.0.0-20220314234659-1baeb1ce4c0b for Go allows an attacker to crash a server in certain…

- Severity: Unrated
- Published: Mar 18, 2022
- Affected: fixed in 0.0.0-20220314234659-1baeb1ce4c0b.
- Fixed in v0.1.0 (released Oct 19, 2022, 215 days after disclosure, the advisory names 0.0.0-20220314234659-1baeb1ce4c0b, which was never published).
- The latest release, v0.58.0, is not affected.

### [CVE-2020-29652](https://cve.now/CVE-2020-29652): A nil pointer dereference in the golang.org/x/crypto/ssh component through v0.0.0-20201203163018-be400aefbc4c for Go allows remote…

- Severity: Unrated
- Published: Dec 17, 2020
- Affected: fixed in 0.0.0-20201216223049-8b5274cf687f.
- Fixed in v0.1.0 (released Oct 19, 2022, 671 days after disclosure, the advisory names 0.0.0-20201216223049-8b5274cf687f, which was never published).
- The latest release, v0.58.0, is not affected.

### [CVE-2020-7919](https://cve.now/CVE-2020-7919): Go before 1.12.16 and 1.13.x before 1.13.7 (and the crypto/cryptobyte package before 0.0.0-20200124225646-8b5121be2f68 for Go) allows…

- Severity: Unrated
- Published: Mar 16, 2020
- Affected: fixed in 0.0.0-20200124225646-8b5121be2f68.
- Fixed in v0.1.0 (released Oct 19, 2022, 947 days after disclosure, the advisory names 0.0.0-20200124225646-8b5121be2f68, which was never published).
- The latest release, v0.58.0, is not affected.

### [CVE-2020-9283](https://cve.now/CVE-2020-9283): golang.org/x/crypto before v0.0.0-20200220183623-bac4c82f6975 for Go allows a panic during signature verification in the…

- Severity: Unrated
- Published: Feb 20, 2020
- Affected: fixed in 0.0.0-20200220183623-bac4c82f6975.
- Fixed in v0.1.0 (released Oct 19, 2022, 972 days after disclosure, the advisory names 0.0.0-20200220183623-bac4c82f6975, which was never published).
- The latest release, v0.58.0, is not affected.

### [CVE-2019-11841](https://cve.now/CVE-2019-11841): A message-forgery issue was discovered in crypto/openpgp/clearsign/clearsign.go in supplementary Go cryptography libraries 2019-03-25.

- Severity: Unrated
- Published: May 22, 2019
- Affected: fixed in 0.0.0-20190424203555-c05e17bb3b2d.
- Fixed in v0.1.0 (released Oct 19, 2022, 1246 days after disclosure, the advisory names 0.0.0-20190424203555-c05e17bb3b2d, which was never published).
- The latest release, v0.58.0, is not affected.

### [CVE-2019-11840](https://cve.now/CVE-2019-11840): An issue was discovered in the supplementary Go cryptography library, golang.org/x/crypto, before v0.0.0-20190320223903-b7391e95e576.

- Severity: Unrated
- Published: May 9, 2019
- Affected: fixed in 0.0.0-20190320223903-b7391e95e576.
- Fixed in v0.1.0 (released Oct 19, 2022, 1259 days after disclosure, the advisory names 0.0.0-20190320223903-b7391e95e576, which was never published).
- The latest release, v0.58.0, is not affected.

### [CVE-2017-3204](https://cve.now/CVE-2017-3204): The Go SSH library (x/crypto/ssh) by default does not verify host keys, facilitating man-in-the-middle attacks.

- Severity: Unrated
- Published: Apr 4, 2017
- Affected: fixed in 0.0.0-20170330155735-e4e2799dd7aa.
- Fixed in v0.1.0 (released Oct 19, 2022, 2024 days after disclosure, the advisory names 0.0.0-20170330155735-e4e2799dd7aa, which was never published).
- The latest release, v0.58.0, is not affected.

---

Source: cve.now
Built by [Sazabi](https://www.sazabi.com/?utm_source=cve-now&utm_medium=markdown), AI-native observability and security: automatic issue detection, plain-language log search and live dashboards.
Page: https://cve.now/packages/go/golang.org/x/crypto
Site guide for agents: https://cve.now/llms.txt
Uses NVD data; not endorsed by NVD.