CR
Product
Crypto
22
CVEs
0
On KEV
10.0
Max CVSS
0
New 30D
Severity mix
Critical 7High 6Medium 9Low 0
Watch
Add Crypto to your stack to get only the CVEs that touch what you run.
| CVE | CVSS | Published | Summary · affected versions |
|---|---|---|---|
| CVE-2026-39827 | 6.5 | May 22 | Invoking memory leak when rejecting channels can lead to DoS in golang.org/x/crypto/ssh Affected: before 0.52.0 |
| CVE-2026-39828 | 6.3 | May 22 | Invoking bypass of certificate restrictions in golang.org/x/crypto/ssh Affected: before 0.52.0 |
| CVE-2023-48795 | 5.9 | Dec 18 | The SSH transport protocol with certain OpenSSH extensions, found in OpenSSH before 9.6 and other products, allows remote attackers to bypass integrity checks such that some… Affected: before 0.17.0 |
| CVE-2019-11841 | 5.9 | May 22 | A message-forgery issue was discovered in crypto/openpgp/clearsign/clearsign.go in supplementary Go cryptography libraries 2019-03-25 Affected: 2019-03-25 |
| CVE-2019-11840 | 5.9 | May 9 | An issue was discovered in the supplementary Go cryptography library, golang.org/x/crypto, before v0.0.0-20190320223903-b7391e95e576 Affected: All versions, or not specified |
| CVE-2026-46598 | 5.3 | May 22 | Invoking pathological inputs can lead to client panic in golang.org/x/crypto/ssh/agent Affected: before 0.52.0 |
| CVE-2026-39835 | 5.3 | May 22 | Invoking server panic during CheckHostKey/Authenticate in golang.org/x/crypto/ssh Affected: before 0.52.0 |
| CVE-2025-47914 | 5.3 | Nov 19 | Malformed constraint may cause denial of service in golang.org/x/crypto/ssh/agent Affected: before 0.45.0 |
| CVE-2025-58181 | 5.3 | Nov 19 | Unbounded memory consumption in golang.org/x/crypto/ssh Affected: before 0.45.0 |
Showing 9
