Vulnerability GO-2025-4116
Unknown
UNKNOWN RISK
Vulnerabilities without an assigned CVSS score. Severity is not determinable from available data.
1 year ago
November 13, 2025 at 09:12 PM UTC
Potential denial of service in golang.org/x/crypto/ssh/agent
v0.1.0 - v0.42.0
v0.1.0 - v0.42.0
Summary
Potential denial of service in golang.org/x/crypto/ssh/agent
Details
SSH clients receiving SSH_AGENT_SUCCESS when expecting a typed response will panic and cause early termination of the client process.
References
Related Vulnerabilities
Other vulnerabilities affecting the same packages
Unknown
2 months ago
Prevent DoS on deadlocked undecided channel in golang.org/x/crypto/ssh
v0.1.0 - v0.55.0 GO-2026-6354
v0.1.0 - v0.55.0 GO-2026-6354
Unknown
2 months ago
Prevent DoS on deadlocked established channel in golang.org/x/crypto/ssh
v0.1.0 - v0.55.0 GO-2026-6355
v0.1.0 - v0.55.0 GO-2026-6355
Unknown
2 months ago
Source-address critical option not enforced for non-public-key auth callbacks in golang.org/x/crypto/ssh
v0.1.0 - v0.54.0 GO-2026-6303
v0.1.0 - v0.54.0 GO-2026-6303
Unknown
4 months ago
The golang.org/x/crypto/openpgp package is unmaintained, unsafe by design, and has known security issues
v0.1.0 - v0.58.0 GO-2026-5932
v0.1.0 - v0.58.0 GO-2026-5932
Critical
4 months ago
golang.org/x/crypto: Invoking VerifiedPublicKeyCallback permissions skip enforcement
v0.1.0 - v0.51.0 GHSA-x527-x647-q7gg
v0.1.0 - v0.51.0 GHSA-x527-x647-q7gg
Impacted packages
Timeline
Published
1 year ago
November 13, 2025 at 09:12 PM UTC
Fixed (v0.43.0)
1 year ago
October 08, 2025 at 05:40 PM UTC
Last Modified
6 hours ago
November 14, 2026 at 01:12 PM UTC