GHSA-9m57-25v3-79x9MediumCVSS 5.3

golang.org/x/crypto/ssh/agent: Invoking pathological inputs can lead to client panic

Published
June 25, 2026
Last Modified
June 25, 2026

🔗 CVE IDs covered (1)

📋 Description

For certain crafted inputs, a 'ed25519.PrivateKey' was created by casting malformed wire bytes, leading to a panic when used.

🎯 Affected products1

  • go/golang.org/x/crypto/ssh/agent:< 0.52.0

🔗 References (6)