golang.org/x/crypto (Go)
Advisories
76
Latest version
v0.58.0
Released Oct 9, 2026
License
BSD-3-Clause
OpenSSF Scorecard
—
How to fix
Upgrading to 0.56.0 or later clears every advisory below that has a fix.
Upgrade commands
go
go get golang.org/x/crypto@v0.58.0 && go mod tidyKnown vulnerabilities
| Advisory | Severity | Affected | Fixed in |
|---|---|---|---|
| GO-2026-6355 Prevent DoS on deadlocked established channel in golang.org/x/crypto/ssh |
High EPSS 0.50% |
< 0.56.0 | 0.56.0 |
| GO-2026-6354 Prevent DoS on deadlocked undecided channel in golang.org/x/crypto/ssh |
High EPSS 0.43% |
< 0.56.0 | 0.56.0 |
| GO-2026-6303 Source-address critical option not enforced for non-public-key auth callbacks in golang.org/x/crypto/ssh |
High EPSS 0.44% |
< 0.55.0 | 0.55.0 |
| GO-2026-5932 The golang.org/x/crypto/openpgp package is unmaintained, unsafe by design, and has known security issues |
Not rated yet | all versions | No fix yet |
| GHSA-w879-237q-wc7r golang.org/x/crypto: Invoking pathological RSA/DSA parameters may cause DoS |
High EPSS 0.47% |
< 0.52.0 | 0.52.0 |
| GHSA-w879-237q-wc7r golang.org/x/crypto: Invoking pathological RSA/DSA parameters may cause DoS |
High EPSS 0.47% |
< 0.52.0 | 0.52.0 |
| GHSA-w879-237q-wc7r golang.org/x/crypto: Invoking pathological RSA/DSA parameters may cause DoS |
High EPSS 0.47% |
< 0.52.0 | 0.52.0 |
| GHSA-vgwf-h737-ff37 golang.org/x/crypto: Invoking client can cause server deadlock on unexpected responses |
Critical EPSS 0.68% |
< 0.52.0 | 0.52.0 |
| GHSA-vgwf-h737-ff37 golang.org/x/crypto: Invoking client can cause server deadlock on unexpected responses |
Critical EPSS 0.68% |
< 0.52.0 | 0.52.0 |
| GHSA-vgwf-h737-ff37 golang.org/x/crypto: Invoking client can cause server deadlock on unexpected responses |
Critical EPSS 0.68% |
< 0.52.0 | 0.52.0 |
| GHSA-rm3j-f69w-wqmq golang.org/x/crypto vulnerable to infinite loop on large channel writes |
Critical EPSS 0.60% |
< 0.52.0 | 0.52.0 |
| GHSA-rm3j-f69w-wqmq golang.org/x/crypto vulnerable to infinite loop on large channel writes |
Critical EPSS 0.60% |
< 0.52.0 | 0.52.0 |
| GHSA-rm3j-f69w-wqmq golang.org/x/crypto vulnerable to infinite loop on large channel writes |
Critical EPSS 0.60% |
< 0.52.0 | 0.52.0 |
| GHSA-qpw4-5x99-6vjp golang.org/x/crypto: Invoking memory leak when rejecting channels can lead to DoS |
Medium EPSS 0.28% |
< 0.52.0 | 0.52.0 |
| GHSA-qpw4-5x99-6vjp golang.org/x/crypto: Invoking memory leak when rejecting channels can lead to DoS |
Medium EPSS 0.28% |
< 0.52.0 | 0.52.0 |
| GHSA-qpw4-5x99-6vjp golang.org/x/crypto: Invoking memory leak when rejecting channels can lead to DoS |
Medium EPSS 0.28% |
< 0.52.0 | 0.52.0 |
| GHSA-q4h4-gmj2-qvw2 golang.org/x/crypto: Invoking byte arithmetic causes underflow and panic |
High EPSS 0.47% |
< 0.52.0 | 0.52.0 |
| GHSA-f5wc-c3c7-36mc golang.org/x/crypto doesn't drop invoking agent constraints when forwarding keys |
Critical EPSS 0.68% |
< 0.52.0 | 0.52.0 |
| GHSA-x527-x647-q7gg golang.org/x/crypto: Invoking VerifiedPublicKeyCallback permissions skip enforcement |
Critical EPSS 0.56% |
< 0.52.0 | 0.52.0 |
| GHSA-x527-x647-q7gg golang.org/x/crypto: Invoking VerifiedPublicKeyCallback permissions skip enforcement |
Critical EPSS 0.56% |
< 0.52.0 | 0.52.0 |
| GHSA-x527-x647-q7gg golang.org/x/crypto: Invoking VerifiedPublicKeyCallback permissions skip enforcement |
Critical EPSS 0.56% |
< 0.52.0 | 0.52.0 |
| GHSA-f5wc-c3c7-36mc golang.org/x/crypto doesn't drop invoking agent constraints when forwarding keys |
Critical EPSS 0.68% |
< 0.52.0 | 0.52.0 |
| GHSA-q4h4-gmj2-qvw2 golang.org/x/crypto: Invoking byte arithmetic causes underflow and panic |
High EPSS 0.47% |
< 0.52.0 | 0.52.0 |
| GHSA-q4h4-gmj2-qvw2 golang.org/x/crypto: Invoking byte arithmetic causes underflow and panic |
High EPSS 0.47% |
< 0.52.0 | 0.52.0 |
| GHSA-jppx-rxg9-jmrx golang.org/x/crypto doesn't enforce invoking key constraints |
Critical EPSS 0.47% |
< 0.52.0 | 0.52.0 |
| GHSA-jppx-rxg9-jmrx golang.org/x/crypto doesn't enforce invoking key constraints |
Critical EPSS 0.47% |
< 0.52.0 | 0.52.0 |
| GHSA-jppx-rxg9-jmrx golang.org/x/crypto doesn't enforce invoking key constraints |
Critical EPSS 0.47% |
< 0.52.0 | 0.52.0 |
| GHSA-45gg-vh54-h5m9 golang.org/x/crypto vulnerable to invoking bypass of certificate restrictions |
Medium EPSS 0.37% |
< 0.52.0 | 0.52.0 |
| GHSA-45gg-vh54-h5m9 golang.org/x/crypto vulnerable to invoking bypass of certificate restrictions |
Medium EPSS 0.37% |
< 0.52.0 | 0.52.0 |
| GHSA-45gg-vh54-h5m9 golang.org/x/crypto vulnerable to invoking bypass of certificate restrictions |
Medium EPSS 0.37% |
< 0.52.0 | 0.52.0 |
| GHSA-5cgq-3rg8-m6cv golang.org/x/crypto vulnerable to auth bypass via unenforced @revoked status |
Critical EPSS 6.91% |
< 0.52.0 | 0.52.0 |
| GHSA-5cgq-3rg8-m6cv golang.org/x/crypto vulnerable to auth bypass via unenforced @revoked status |
Critical EPSS 6.91% |
< 0.52.0 | 0.52.0 |
| GHSA-5cgq-3rg8-m6cv golang.org/x/crypto vulnerable to auth bypass via unenforced @revoked status |
Critical EPSS 6.91% |
< 0.52.0 | 0.52.0 |
| GHSA-78mq-xcr3-xm33 golang.org/x/crypto is vulnerable to invoking server panic during CheckHostKey/Authenticate flow |
Medium EPSS 0.50% |
< 0.52.0 | 0.52.0 |
| GHSA-78mq-xcr3-xm33 golang.org/x/crypto is vulnerable to invoking server panic during CheckHostKey/Authenticate flow |
Medium EPSS 0.50% |
< 0.52.0 | 0.52.0 |
| GHSA-78mq-xcr3-xm33 golang.org/x/crypto is vulnerable to invoking server panic during CheckHostKey/Authenticate flow |
Medium EPSS 0.50% |
< 0.52.0 | 0.52.0 |
| GHSA-89gr-r52h-f8rx golang.org/x/crypto: FIDO/U2F security key physical presence check can be bypassed |
Critical EPSS 0.48% |
< 0.52.0 | 0.52.0 |
| GHSA-89gr-r52h-f8rx golang.org/x/crypto: FIDO/U2F security key physical presence check can be bypassed |
Critical EPSS 0.48% |
< 0.52.0 | 0.52.0 |
| GHSA-89gr-r52h-f8rx golang.org/x/crypto: FIDO/U2F security key physical presence check can be bypassed |
Critical EPSS 0.48% |
< 0.52.0 | 0.52.0 |
| GHSA-9m57-25v3-79x9 golang.org/x/crypto: Invoking pathological inputs can lead to client panic |
Medium EPSS 0.41% |
< 0.52.0 | 0.52.0 |
| GHSA-9m57-25v3-79x9 golang.org/x/crypto: Invoking pathological inputs can lead to client panic |
Medium EPSS 0.41% |
< 0.52.0 | 0.52.0 |
| GHSA-9m57-25v3-79x9 golang.org/x/crypto: Invoking pathological inputs can lead to client panic |
Medium EPSS 0.41% |
< 0.52.0 | 0.52.0 |
| GHSA-f5wc-c3c7-36mc golang.org/x/crypto doesn't drop invoking agent constraints when forwarding keys |
Critical EPSS 0.68% |
< 0.52.0 | 0.52.0 |
| GHSA-j5w8-q4qc-rx2x golang.org/x/crypto/ssh allows an attacker to cause unbounded memory consumption |
Medium EPSS 0.60% |
< 0.45.0 | 0.45.0 |
| GHSA-j5w8-q4qc-rx2x golang.org/x/crypto/ssh allows an attacker to cause unbounded memory consumption |
Medium EPSS 0.60% |
< 0.45.0 | 0.45.0 |
| GHSA-j5w8-q4qc-rx2x golang.org/x/crypto/ssh allows an attacker to cause unbounded memory consumption |
Medium EPSS 0.60% |
< 0.45.0 | 0.45.0 |
| GHSA-f6x5-jh6r-wrfv golang.org/x/crypto/ssh/agent vulnerable to panic if message is malformed due to out of bounds read |
Medium EPSS 0.55% |
< 0.45.0 | 0.45.0 |
| GHSA-f6x5-jh6r-wrfv golang.org/x/crypto/ssh/agent vulnerable to panic if message is malformed due to out of bounds read |
Medium EPSS 0.55% |
< 0.45.0 | 0.45.0 |
| GHSA-f6x5-jh6r-wrfv golang.org/x/crypto/ssh/agent vulnerable to panic if message is malformed due to out of bounds read |
Medium EPSS 0.55% |
< 0.45.0 | 0.45.0 |
| GO-2025-4116 golang.org/x/crypto/ssh/agent has a potential denial of service |
High EPSS 0.67% |
< 0.43.0 | 0.43.0 |
| GHSA-hcg3-q754-cr77 golang.org/x/crypto Vulnerable to Denial of Service (DoS) via Slow or Incomplete Key Exchange |
High EPSS 0.94% |
< 0.35.0 | 0.35.0 |
| GHSA-hcg3-q754-cr77 golang.org/x/crypto Vulnerable to Denial of Service (DoS) via Slow or Incomplete Key Exchange |
High EPSS 0.94% |
< 0.35.0 | 0.35.0 |
| GHSA-v778-237x-gjrc Misuse of ServerConfig.PublicKeyCallback may cause authorization bypass in golang.org/x/crypto |
Critical EPSS 3.18% |
< 0.31.0 | 0.31.0 |
| GHSA-v778-237x-gjrc Misuse of ServerConfig.PublicKeyCallback may cause authorization bypass in golang.org/x/crypto |
Critical EPSS 3.18% |
< 0.31.0 | 0.31.0 |
| GO-2024-2961 Limited directory traversal vulnerability on Windows in golang.org/x/crypto |
High EPSS 0.64% |
< 0.0.0-20220525230936-793ad666bf5e | 0.0.0-20220525230936-793ad666bf5e |
| GHSA-45x7-px36-x8w8 Prefix Truncation Attack against ChaCha20-Poly1305 and Encrypt-then-MAC aka Terrapin |
Medium EPSS 93.55% |
< 0.0.0-20231218163308-9d2ee975ef9f | 0.0.0-20231218163308-9d2ee975ef9f |
| GHSA-45x7-px36-x8w8 Prefix Truncation Attack against ChaCha20-Poly1305 and Encrypt-then-MAC aka Terrapin |
Medium EPSS 93.55% |
>= 0.1.0, < 0.17.0 | 0.17.0 |
| GHSA-45x7-px36-x8w8 Prefix Truncation Attack against ChaCha20-Poly1305 and Encrypt-then-MAC aka Terrapin |
Medium EPSS 93.55% |
< 0.0.0-20231218163308-9d2ee975ef9f | 0.0.0-20231218163308-9d2ee975ef9f |
| GHSA-45x7-px36-x8w8 Prefix Truncation Attack against ChaCha20-Poly1305 and Encrypt-then-MAC aka Terrapin |
Medium EPSS 93.55% |
>= 0.1.0, < 0.17.0 | 0.17.0 |
| GHSA-45x7-px36-x8w8 Prefix Truncation Attack against ChaCha20-Poly1305 and Encrypt-then-MAC aka Terrapin |
Medium EPSS 93.55% |
< 0.17.0 | 0.17.0 |
| GHSA-gwc9-m7rh-j2ww x/crypto/ssh vulnerable to panic via malformed packets |
High EPSS 1.19% |
< 0.0.0-20211202192323-5770296d904e | 0.0.0-20211202192323-5770296d904e |
| GHSA-gwc9-m7rh-j2ww x/crypto/ssh vulnerable to panic via malformed packets |
High EPSS 1.19% |
< 0.0.0-20211202192323-5770296d904e | 0.0.0-20211202192323-5770296d904e |
| GHSA-x3jr-pf6g-c48f Golang/x/crypto message forgery vulnerability |
Medium EPSS 2.00% |
< 0.0.0-20190424203555-c05e17bb3b2d | 0.0.0-20190424203555-c05e17bb3b2d |
| GHSA-x3jr-pf6g-c48f Golang/x/crypto message forgery vulnerability |
Medium EPSS 2.00% |
< 0.0.0-20190424203555-c05e17bb3b2d | 0.0.0-20190424203555-c05e17bb3b2d |
| GHSA-r5c5-pr8j-pfp7 golang.org/x/crypto/salsa20/salsa uses insufficiently random values |
Medium EPSS 3.45% |
< 0.0.0-20190320223903-b7391e95e576 | 0.0.0-20190320223903-b7391e95e576 |
| GHSA-r5c5-pr8j-pfp7 golang.org/x/crypto/salsa20/salsa uses insufficiently random values |
Medium EPSS 3.45% |
< 0.0.0-20190320223903-b7391e95e576 | 0.0.0-20190320223903-b7391e95e576 |
| GHSA-8c26-wmh5-6g9v golang.org/x/crypto/ssh Denial of service via crafted Signer |
High EPSS 3.93% |
< 0.0.0-20220314234659-1baeb1ce4c0b | 0.0.0-20220314234659-1baeb1ce4c0b |
| GHSA-8c26-wmh5-6g9v golang.org/x/crypto/ssh Denial of service via crafted Signer |
High EPSS 3.93% |
< 0.0.0-20220314234659-1baeb1ce4c0b | 0.0.0-20220314234659-1baeb1ce4c0b |
| GHSA-cjjc-xp8v-855w Helm uses crypto package vulnerable to panic from malformed X.509 certificate |
High EPSS 2.65% |
< 0.0.0-20200124225646-8b5121be2f68 | 0.0.0-20200124225646-8b5121be2f68 |
| GHSA-cjjc-xp8v-855w Helm uses crypto package vulnerable to panic from malformed X.509 certificate |
High EPSS 2.65% |
< 0.0.0-20200124225646-8b5121be2f68 | 0.0.0-20200124225646-8b5121be2f68 |
| GHSA-ffhg-7mh4-33c4 Improper Verification of Cryptographic Signature in golang.org/x/crypto |
High EPSS 21.05% |
< 0.0.0-20200220183623-bac4c82f6975 | 0.0.0-20200220183623-bac4c82f6975 |
| GHSA-xhjq-w7xm-p8qj golang.org/x/crypto/ssh Man-in-the-Middle attack |
High EPSS 3.16% |
< 0.0.0-20170330155735-e4e2799dd7aa | 0.0.0-20170330155735-e4e2799dd7aa |
| GHSA-ffhg-7mh4-33c4 Improper Verification of Cryptographic Signature in golang.org/x/crypto |
High EPSS 21.05% |
< 0.0.0-20200220183623-bac4c82f6975 | 0.0.0-20200220183623-bac4c82f6975 |
| GHSA-xhjq-w7xm-p8qj golang.org/x/crypto/ssh Man-in-the-Middle attack |
High EPSS 3.16% |
< 0.0.0-20170330155735-e4e2799dd7aa | 0.0.0-20170330155735-e4e2799dd7aa |
| GHSA-3vm4-22fp-5rfm golang.org/x/crypto/ssh NULL Pointer Dereference vulnerability |
High EPSS 3.18% |
< 0.0.0-20201216223049-8b5274cf687f | 0.0.0-20201216223049-8b5274cf687f |
| GHSA-3vm4-22fp-5rfm golang.org/x/crypto/ssh NULL Pointer Dereference vulnerability |
High EPSS 3.18% |
< 0.0.0-20201216223049-8b5274cf687f | 0.0.0-20201216223049-8b5274cf687f |
Source: https://go.googlesource.com/crypto
MergeHarbor checks every repository's dependencies against this database, ranks what matters by exploitability and reachability, routes it to the owning team and opens the fix pull request.
Check your repos with MergeHarbor