PkgSeer

Vulnerabilities

Last updated 53 minutes ago
Filters
Severity
Critical Severity
CVSS Score Range: 9.0–10.0
Critical severity vulnerabilities (CVSS 9.0–10.0). These represent the highest impact issues.
High Severity
CVSS Score Range: 7.0–8.9
High severity vulnerabilities (CVSS 7.0–8.9). Serious vulnerabilities that should be prioritized soon after critical fixes.
Medium Severity
CVSS Score Range: 4.0–6.9
Medium severity vulnerabilities (CVSS 4.0–6.9). Important issues that meaningfully reduce security confidence.
Low Severity
CVSS Score Range: < 4.0
Low severity vulnerabilities (CVSS < 4.0). Hygiene issues that can accumulate but pose lower immediate risk.
Unknown Severity
CVSS Score Range: No score
Vulnerabilities without an assigned CVSS score. Severity is not determinable from available data.
Package Summary Severity Published Modified
golang.org/x/crypto The golang.org/x/crypto/openpgp package is unmaintained, unsafe by design, and has known security issues Unknown 3 months ago 11 hours ago
golang.org/x/crypto/openpgp The golang.org/x/crypto/openpgp package is unmaintained, unsafe by design, and has known security issues Unknown 3 months ago 11 hours ago
golang.org/x/crypto Prevent DoS on deadlocked established channel in golang.org/x/crypto/ssh Unknown 2 months ago 1 month ago
golang.org/x/crypto Invoking client can cause server deadlock on unexpected responses in golang.org/x/crypto/ssh Unknown 5 months ago 1 month ago
golang.org/x/crypto Invoking server panic during CheckHostKey/Authenticate in golang.org/x/crypto/ssh Unknown 5 months ago 1 month ago
golang.org/x/crypto Invoking infinite loop on large channel writes in golang.org/x/crypto/ssh Unknown 5 months ago 1 month ago
golang.org/x/crypto Invoking pathological inputs can lead to client panic in golang.org/x/crypto/ssh/agent Unknown 5 months ago 1 month ago
golang.org/x/crypto Invoking memory leak when rejecting channels can lead to DoS in golang.org/x/crypto/ssh Unknown 5 months ago 1 month ago
golang.org/x/crypto Invoking byte arithmetic causes underflow and panic in golang.org/x/crypto/ssh Unknown 5 months ago 1 month ago
golang.org/x/crypto Invoking bypass of FIDO/U2F security keys physical interaction in golang.org/x/crypto/ssh Unknown 5 months ago 1 month ago
golang.org/x/crypto golang.org/x/crypto: Invoking client can cause server deadlock on unexpected responses Critical 9.1 4 months ago 1 month ago
golang.org/x/crypto Invoking agent constraints dropped when forwarding keys in golang.org/x/crypto/ssh/agent Unknown 5 months ago 1 month ago
golang.org/x/crypto Invoking pathological RSA/DSA parameters may cause DoS in golang.org/x/crypto/ssh Unknown 5 months ago 1 month ago
golang.org/x/crypto Invoking auth bypass via unenforced @revoked status in golang.org/x/crypto/ssh/knownhosts Unknown 5 months ago 1 month ago
golang.org/x/crypto golang.org/x/crypto is vulnerable to invoking server panic during CheckHostKey/Authenticate flow Medium Risk 5.3 4 months ago 1 month ago
golang.org/x/crypto golang.org/x/crypto vulnerable to invoking bypass of certificate restrictions Medium Risk 6.3 4 months ago 1 month ago
golang.org/x/crypto Misuse of ServerConfig.PublicKeyCallback may cause authorization bypass in golang.org/x/crypto Critical 9.1 1 year ago 1 month ago
golang.org/x/crypto golang.org/x/crypto: Invoking pathological inputs can lead to client panic Medium Risk 5.3 4 months ago 1 month ago
golang.org/x/crypto golang.org/x/crypto: Invoking VerifiedPublicKeyCallback permissions skip enforcement Critical 10.0 4 months ago 1 month ago
golang.org/x/crypto golang.org/x/crypto doesn't enforce invoking key constraints Critical 9.1 4 months ago 1 month ago
golang.org/x/crypto golang.org/x/crypto: Invoking byte arithmetic causes underflow and panic High Risk 7.5 4 months ago 1 month ago
golang.org/x/crypto golang.org/x/crypto: Invoking memory leak when rejecting channels can lead to DoS Medium Risk 6.5 4 months ago 1 month ago
golang.org/x/crypto golang.org/x/crypto vulnerable to infinite loop on large channel writes Critical 9.1 4 months ago 1 month ago
golang.org/x/crypto golang.org/x/crypto: Invoking pathological RSA/DSA parameters may cause DoS High Risk 7.5 4 months ago 1 month ago
golang.org/x/crypto golang.org/x/crypto doesn't drop invoking agent constraints when forwarding keys Critical 9.1 4 months ago 1 month ago
golang.org/x/crypto golang.org/x/crypto vulnerable to auth bypass via unenforced @revoked status Critical 9.1 4 months ago 1 month ago
golang.org/x/crypto golang.org/x/crypto: FIDO/U2F security key physical presence check can be bypassed Critical 9.1 4 months ago 1 month ago
golang.org/x/crypto/ssh/agent golang.org/x/crypto/ssh/agent has a potential denial of service High Risk 7.5 11 months ago 1 month ago
golang.org/x/crypto golang.org/x/crypto/ssh/agent vulnerable to panic if message is malformed due to out of bounds read Medium Risk 5.3 11 months ago 1 month ago
golang.org/x/crypto golang.org/x/crypto/ssh allows an attacker to cause unbounded memory consumption Medium Risk 5.3 11 months ago 1 month ago
golang.org/x/crypto golang.org/x/crypto Vulnerable to Denial of Service (DoS) via Slow or Incomplete Key Exchange High Risk 7.5 1 year ago 1 month ago
golang.org/x/crypto Prefix Truncation Attack against ChaCha20-Poly1305 and Encrypt-then-MAC aka Terrapin Medium Risk 5.9 2 years ago 1 month ago
golang.org/x/crypto Golang/x/crypto message forgery vulnerability Medium Risk 5.9 4 years ago 1 month ago
golang.org/x/crypto x/crypto/ssh vulnerable to panic via malformed packets High Risk 7.5 4 years ago 1 month ago
golang.org/x/crypto golang.org/x/crypto/salsa20/salsa uses insufficiently random values Medium Risk 5.9 4 years ago 1 month ago
golang.org/x/crypto golang.org/x/crypto/ssh NULL Pointer Dereference vulnerability High Risk 7.5 4 years ago 1 month ago
golang.org/x/crypto golang.org/x/crypto/ssh Denial of service via crafted Signer High Risk 7.5 4 years ago 1 month ago
golang.org/x/crypto Improper Verification of Cryptographic Signature in golang.org/x/crypto High Risk 7.5 5 years ago 1 month ago
golang.org/x/crypto Helm uses crypto package vulnerable to panic from malformed X.509 certificate High Risk 7.5 5 years ago 1 month ago
golang.org/x/crypto Prevent DoS on deadlocked undecided channel in golang.org/x/crypto/ssh Unknown 2 months ago 2 months ago
golang.org/x/crypto Source-address critical option not enforced for non-public-key auth callbacks in golang.org/x/crypto/ssh Unknown 2 months ago 2 months ago
golang.org/x/crypto Invoking key constraints not enforced in golang.org/x/crypto/ssh/agent Unknown 5 months ago 2 months ago
golang.org/x/crypto Misuse of connection.serverAuthenticate may cause authorization bypass in golang.org/x/crypto Unknown 1 year ago 2 months ago
golang.org/x/crypto Invoking bypass of certificate restrictions in golang.org/x/crypto/ssh Unknown 5 months ago 3 months ago
golang.org/x/crypto Invoking VerifiedPublicKeyCallback permissions skip enforcement in golang.org/x/crypto/ssh Unknown 5 months ago 3 months ago
golang.org/x/crypto Man-in-the-middle attacker can compromise integrity of secure channel in golang.org/x/crypto Unknown 2 years ago 3 months ago
golang.org/x/crypto Limited directory traversal vulnerability on Windows in golang.org/x/crypto Unknown 2 years ago 4 months ago
golang.org/x/crypto Potential denial of service in golang.org/x/crypto/ssh/agent Unknown 11 months ago 5 months ago
golang.org/x/crypto Unbounded memory consumption in golang.org/x/crypto/ssh Unknown 11 months ago 5 months ago
golang.org/x/crypto Malformed constraint may cause denial of service in golang.org/x/crypto/ssh/agent Unknown 11 months ago 5 months ago
Data courtesy of OSV.dev
Page 1