GHSA-9m57-25v3-79x9MediumCVSS 5.3
golang.org/x/crypto/ssh/agent: Invoking pathological inputs can lead to client panic
🔗 CVE IDs covered (1)
📋 Description
For certain crafted inputs, a 'ed25519.PrivateKey' was created by casting malformed wire bytes, leading to a panic when used.
🎯 Affected products1
- go/golang.org/x/crypto/ssh/agent:< 0.52.0