CVE Tools
Track your stack

Golang-org-x-crypto

13 CVEs tracked since 2026. Since May 2026, none of them reached CISA KEV.

Golang-org-x-crypto CVEs per month

May 2026 to May 2026. Point at a month, or focus the strip and use the arrow keys.
Golang-org-x-crypto CVEs per month, with the share now in CISA KEV
MonthCVEsIn CISA KEV
2026-05130

Products

The products that kept showing up in Golang-org-x-crypto's monthly top three, with their CVEs summed over those months.

  1. Golang.org/x/crypto/ssh91 month
  2. Golang.org/x/crypto/ssh/agent31 month
  3. Golang.org/x/crypto/ssh/knownhosts11 month

Latest CVEs

The 15 most recently published vulnerabilities affecting Golang-org-x-crypto.

  1. CVE-2026-78662Prevent DoS on deadlocked undecided channel in golang.org/x/crypto/ssh7.5
  2. CVE-2026-56855Prevent DoS on deadlocked established channel in golang.org/x/crypto/ssh7.5
  3. CVE-2026-56854Source-address critical option not enforced for non-public-key auth callbacks in golang.org/x/crypto/ssh7.5
  4. CVE-2026-42508Invoking auth bypass via unenforced @revoked status in golang.org/x/crypto/ssh/knownhosts9.1
  5. CVE-2026-46595Invoking VerifiedPublicKeyCallback permissions skip enforcement in golang.org/x/crypto/ssh10.0
  6. CVE-2026-46598Invoking pathological inputs can lead to client panic in golang.org/x/crypto/ssh/agent5.3
  7. CVE-2026-39834Invoking infinite loop on large channel writes in golang.org/x/crypto/ssh9.1
  8. CVE-2026-39829Invoking pathological RSA/DSA parameters may cause DoS in golang.org/x/crypto/ssh7.5
  9. CVE-2026-39827Invoking memory leak when rejecting channels can lead to DoS in golang.org/x/crypto/ssh6.5
  10. CVE-2026-39830Invoking client can cause server deadlock on unexpected responses in golang.org/x/crypto/ssh9.1
  11. CVE-2026-39831Invoking bypass of FIDO/U2F security keys physical interaction in golang.org/x/crypto/ssh9.1
  12. CVE-2026-46597Invoking byte arithmetic causes underflow and panic in golang.org/x/crypto/ssh7.5
  13. CVE-2026-39828Invoking bypass of certificate restrictions in golang.org/x/crypto/ssh6.3
  14. CVE-2026-39835Invoking server panic during CheckHostKey/Authenticate in golang.org/x/crypto/ssh5.3
  15. CVE-2026-39833Invoking key constraints not enforced in golang.org/x/crypto/ssh/agent9.1

The record

Peak rank
#89 in May 2026
Busiest month shown
May 2026, 13 CVEs
Months with a KEV entry
0 since May 2026
Monthly snapshots
1 since 2026
Golang-org-x-crypto's full record, month by month

We use analytics cookies to see which pages and articles actually help people. Decline and none of them run — the site works the same. What we store