Invoking VerifiedPublicKeyCallback permissions skip enforcement in golang.org/x/crypto/ssh

Invoking auth bypass via unenforced @revoked status in golang.org/x/crypto/ssh/knownhosts

Invoking infinite loop on large channel writes in golang.org/x/crypto/ssh

Invoking bypass of FIDO/U2F security keys physical interaction in golang.org/x/crypto/ssh

Invoking client can cause server deadlock on unexpected responses in golang.org/x/crypto/ssh

Invoking agent constraints dropped when forwarding keys in golang.org/x/crypto/ssh/agent

Invoking key constraints not enforced in golang.org/x/crypto/ssh/agent

The Go SSH library (x/crypto/ssh) by default does not verify host keys, facilitating man-in-the-middle attacks

Prevent DoS on deadlocked established channel in golang.org/x/crypto/ssh

Prevent DoS on deadlocked undecided channel in golang.org/x/crypto/ssh

Invoking pathological RSA/DSA parameters may cause DoS in golang.org/x/crypto/ssh

Invoking byte arithmetic causes underflow and panic in golang.org/x/crypto/ssh

Limited directory traversal vulnerability on Windows in golang.org/x/crypto

Invoking memory leak when rejecting channels can lead to DoS in golang.org/x/crypto/ssh

Invoking bypass of certificate restrictions in golang.org/x/crypto/ssh

The SSH transport protocol with certain OpenSSH extensions, found in OpenSSH before 9.6 and other products, allows remote attackers to bypass integrity checks such that some…

A message-forgery issue was discovered in crypto/openpgp/clearsign/clearsign.go in supplementary Go cryptography libraries 2019-03-25

An issue was discovered in the supplementary Go cryptography library, golang.org/x/crypto, before v0.0.0-20190320223903-b7391e95e576

Invoking pathological inputs can lead to client panic in golang.org/x/crypto/ssh/agent

Invoking server panic during CheckHostKey/Authenticate in golang.org/x/crypto/ssh

Malformed constraint may cause denial of service in golang.org/x/crypto/ssh/agent

Unbounded memory consumption in golang.org/x/crypto/ssh