Skip to content

Vulnerabilities of golang.org/x/crypto golang.org/x/crypto/ssh/agent

Is your version affected?

CVE Summary Score Published
CVE-2026-46598 For certain crafted inputs, a 'ed25519.PrivateKey' was created by casting malformed wire bytes, leading to a panic… 5.3 Medium May 22, 2026
CVE-2026-39832 When adding a key to a remote agent constraint extensions such as restrict-destination-v00@openssh.com were not… 9.1 Critical May 22, 2026
CVE-2026-39833 The in-memory keyring returned by NewKeyring() silently accepted keys with the ConfirmBeforeUse constraint but never… 9.1 Critical May 22, 2026
CVE-2025-47914 SSH Agent servers do not validate the size of messages when processing new identity requests, which may cause the… 5.3 Medium Nov 19, 2025
CVE-2025-47913 SSH clients receiving SSH_AGENT_SUCCESS when expecting a typed response will panic and cause early termination of the… 7.5 High Nov 13, 2025

Other golang.org/x/crypto products