VulnSea

golang.org/x/crypto/ssh vulnerabilities

CVEs whose affected-version data names the golang.org/x/crypto/ssh package (go). Each record lists the affected and patched versions; check a specific version with the dependency checker or POST /api/sbom.

1 CVERSS

CVE-2026-39828Medium· 6.3⚖ disputed
4mo ago

Invoking bypass of certificate restrictions in golang.org/x/crypto/ssh

When an SSH server authentication callback returned PartialSuccessError with non-nil Permissions, those permissions were silently discarded, potentially dropping certificate restrictions such as force-command after a second factor succee…

▾ Sunlitgolang.org/x/crypto · golang.org/x/crypto/sshEPSS 0.37%via CVEORG
golang.org/x/crypto/ssh vulnerabilities (CVEs) · VulnSea