CR
Product
Crypto
by Golang · last CVE Sep 2, 2026
22
CVEs
0
On KEV
10.0
Max CVSS
0
New 30D
Severity mix
Critical 7High 6Medium 9Low 0
Watch

Add Crypto to your stack to get only the CVEs that touch what you run.

CVECVSSEPSSPublishedSummary · affected versions
CVE-2026-39827
6.5
0%
May 22
Invoking memory leak when rejecting channels can lead to DoS in golang.org/x/crypto/ssh
Affected: before 0.52.0
CVE-2026-39828
6.3
0%
May 22
Invoking bypass of certificate restrictions in golang.org/x/crypto/ssh
Affected: before 0.52.0
CVE-2023-48795
5.9
94%
Dec 18
The SSH transport protocol with certain OpenSSH extensions, found in OpenSSH before 9.6 and other products, allows remote attackers to bypass integrity checks such that some…
Affected: before 0.17.0
CVE-2019-11841
5.9
2%
May 22
A message-forgery issue was discovered in crypto/openpgp/clearsign/clearsign.go in supplementary Go cryptography libraries 2019-03-25
Affected: 2019-03-25
CVE-2019-11840
5.9
3%
May 9
An issue was discovered in the supplementary Go cryptography library, golang.org/x/crypto, before v0.0.0-20190320223903-b7391e95e576
Affected: All versions, or not specified
CVE-2026-46598
5.3
0%
May 22
Invoking pathological inputs can lead to client panic in golang.org/x/crypto/ssh/agent
Affected: before 0.52.0
CVE-2026-39835
5.3
1%
May 22
Invoking server panic during CheckHostKey/Authenticate in golang.org/x/crypto/ssh
Affected: before 0.52.0
CVE-2025-47914
5.3
1%
Nov 19
Malformed constraint may cause denial of service in golang.org/x/crypto/ssh/agent
Affected: before 0.45.0
CVE-2025-58181
5.3
1%
Nov 19
Unbounded memory consumption in golang.org/x/crypto/ssh
Affected: before 0.45.0
Showing 9