GO
Product
golang.org/x/crypto/ssh
by golang.org/x/crypto · last CVE Sep 2, 2026
15
CVEs
0
On KEV
10.0
Max CVSS
0
New 30D
Severity mix
Critical 5High 6Medium 4Low 0
Watch

Add golang.org/x/crypto/ssh to your stack to get only the CVEs that touch what you run.

CVECVSSEPSSPublishedSummary · affected versions
CVE-2026-46595
10.0
1%
May 22
Invoking VerifiedPublicKeyCallback permissions skip enforcement in golang.org/x/crypto/ssh
Affected: before 0.52.0
CVE-2026-39834
9.1
1%
May 22
Invoking infinite loop on large channel writes in golang.org/x/crypto/ssh
Affected: before 0.52.0
CVE-2026-39831
9.1
0%
May 22
Invoking bypass of FIDO/U2F security keys physical interaction in golang.org/x/crypto/ssh
Affected: before 0.52.0
CVE-2026-39830
9.1
1%
May 22
Invoking client can cause server deadlock on unexpected responses in golang.org/x/crypto/ssh
Affected: before 0.52.0
CVE-2024-45337
9.1
3%
Dec 11
Misuse of connection.serverAuthenticate may cause authorization bypass in golang.org/x/crypto
Affected: before 0.31.0
CVE-2026-56855
7.5
0%
Sep 2
Prevent DoS on deadlocked established channel in golang.org/x/crypto/ssh
Affected: before 0.56.0
CVE-2026-78662
7.5
0%
Sep 2
Prevent DoS on deadlocked undecided channel in golang.org/x/crypto/ssh
Affected: before 0.56.0
CVE-2026-56854
7.5
0%
Aug 28
Source-address critical option not enforced for non-public-key auth callbacks in golang.org/x/crypto/ssh
Affected: before 0.55.0
CVE-2026-39829
7.5
0%
May 22
Invoking pathological RSA/DSA parameters may cause DoS in golang.org/x/crypto/ssh
Affected: before 0.52.0
CVE-2026-46597
7.5
0%
May 22
Invoking byte arithmetic causes underflow and panic in golang.org/x/crypto/ssh
Affected: before 0.52.0
CVE-2025-22869
7.5
1%
Feb 26
Potential denial of service in golang.org/x/crypto
Affected: before 0.35.0
CVE-2026-39827
6.5
0%
May 22
Invoking memory leak when rejecting channels can lead to DoS in golang.org/x/crypto/ssh
Affected: before 0.52.0
CVE-2026-39828
6.3
0%
May 22
Invoking bypass of certificate restrictions in golang.org/x/crypto/ssh
Affected: before 0.52.0
CVE-2026-39835
5.3
1%
May 22
Invoking server panic during CheckHostKey/Authenticate in golang.org/x/crypto/ssh
Affected: before 0.52.0
CVE-2025-58181
5.3
1%
Nov 19
Unbounded memory consumption in golang.org/x/crypto/ssh
Affected: before 0.45.0
Showing 15