Skip to content

Known vulnerabilities in golang.org/x/crypto/ssh/agent

Is your version affected?

CVE Summary Score Published
CVE-2026-39832 When adding a key to a remote agent constraint extensions such as restrict-destination-v00@openssh.com were not… 9.1 Critical May 22, 2026
CVE-2026-39833 The in-memory keyring returned by NewKeyring() silently accepted keys with the ConfirmBeforeUse constraint but never… 9.1 Critical May 22, 2026

Other golang.org/x/crypto products