Skip to main content
cve.nowby Sazabi
← Go
GoPackage

golang.org/x/crypto/ssh/agent

5 known vulnerabilities (2 critical, 1 high, 2 medium), with the versions each affects and the releases that fix them.

Latest release
Not known: cve.now hasn't read this package's releases
Newest unaffected release
Not known without release data
Advisories
5 · 2 critical, 1 high, 2 medium
Registry
pkg.go.dev

Advisories 5

  • CVE-2026-46598Medium 5.3

    Invoking pathological inputs can lead to client panic in golang.org/x/crypto/ssh/agent

    Affected: fixed in 0.52.0.

  • CVE-2026-39832Critical 9.1

    Invoking agent constraints dropped when forwarding keys in golang.org/x/crypto/ssh/agent

    Affected: fixed in 0.52.0.

  • CVE-2026-39833Critical 9.1

    Invoking key constraints not enforced in golang.org/x/crypto/ssh/agent

    Affected: fixed in 0.52.0.

  • CVE-2025-47914Medium 5.3

    Malformed constraint may cause denial of service in golang.org/x/crypto/ssh/agent

    Affected: fixed in 0.45.0.

  • Potential denial of service in golang.org/x/crypto/ssh/agent

    Affected: fixed in 0.43.0; fixed in 0.43.0.