Skip to content

Vulnerabilities of golang.org/x/crypto golang.org/x/crypto/ssh

Is your version affected?

CVE Summary Score Published
CVE-2026-39834 When writing data larger than 4GB in a single Write call on an SSH channel, an integer overflow in the internal… 9.1 Critical May 22, 2026
CVE-2026-46595 Previously, CVE-2024-45337 fixed an authorization bypass for misused ssh server configurations; if any other type of… 10.0 Critical May 22, 2026
CVE-2026-39830 A malicious SSH peer could send unsolicited global request responses to fill an internal buffer, blocking the… 9.1 Critical May 22, 2026
CVE-2026-39831 The Verify() method for FIDO/U2F security key types (sk-ecdsa-sha2-nistp256@openssh.com, sk-ssh-ed25519@openssh.com) did… 9.1 Critical May 22, 2026
CVE-2024-45337 Applications and libraries which misuse connection.serverAuthenticate (via callback field… 9.1 Critical Dec 11, 2024

Other golang.org/x/crypto products