Security Advisories for golang.org/x/crypto in go
Critical
5 months ago
golang.org/x/crypto: Invoking VerifiedPublicKeyCallback permissions skip enforcement
go
golang.org/x/crypto
Critical
5 months ago
golang.org/x/crypto vulnerable to auth bypass via unenforced @revoked status
go
golang.org/x/crypto
Critical
5 months ago
golang.org/x/crypto vulnerable to infinite loop on large channel writes
go
golang.org/x/crypto
Critical
5 months ago
golang.org/x/crypto: FIDO/U2F security key physical presence check can be bypassed
go
golang.org/x/crypto
High
5 months ago
golang.org/x/crypto: Invoking pathological RSA/DSA parameters may cause DoS
go
golang.org/x/crypto
Critical
5 months ago
golang.org/x/crypto: Invoking client can cause server deadlock on unexpected responses
go
golang.org/x/crypto
Moderate
5 months ago
golang.org/x/crypto: Invoking memory leak when rejecting channels can lead to DoS
go
golang.org/x/crypto
Moderate
5 months ago
golang.org/x/crypto is vulnerable to invoking server panic during CheckHostKey/Authenticate flow
go
golang.org/x/crypto
Moderate
5 months ago
golang.org/x/crypto vulnerable to invoking bypass of certificate restrictions
go
golang.org/x/crypto
High
5 months ago
golang.org/x/crypto: Invoking byte arithmetic causes underflow and panic
go
golang.org/x/crypto
Critical
5 months ago
golang.org/x/crypto doesn't drop invoking agent constraints when forwarding keys
go
golang.org/x/crypto
Critical
5 months ago
golang.org/x/crypto doesn't enforce invoking key constraints
go
golang.org/x/crypto
Moderate
5 months ago
golang.org/x/crypto: Invoking pathological inputs can lead to client panic
go
golang.org/x/crypto
Moderate
12 months ago
golang.org/x/crypto/ssh/agent vulnerable to panic if message is malformed due to out of bounds read
go
golang.org/x/crypto
Moderate
12 months ago
golang.org/x/crypto/ssh allows an attacker to cause unbounded memory consumption
go
golang.org/x/crypto
High
over 1 year ago
golang.org/x/crypto Vulnerable to Denial of Service (DoS) via Slow or Incomplete Key Exchange
go
golang.org/x/crypto
Critical
almost 2 years ago
Misuse of ServerConfig.PublicKeyCallback may cause authorization bypass in golang.org/x/crypto
go
golang.org/x/crypto
Moderate
almost 3 years ago
Prefix Truncation Attack against ChaCha20-Poly1305 and Encrypt-then-MAC aka Terrapin
go, pypi, cargo
golang.org/x/crypto, paramiko, russh
High
about 4 years ago
x/crypto/ssh vulnerable to panic via malformed packets
go
golang.org/x/crypto
High
over 4 years ago
golang.org/x/crypto/ssh NULL Pointer Dereference vulnerability
go
golang.org/x/crypto
Moderate
over 4 years ago
golang.org/x/crypto/salsa20/salsa uses insufficiently random values
go
golang.org/x/crypto
High
over 4 years ago
golang.org/x/crypto/ssh Denial of service via crafted Signer
go
golang.org/x/crypto
High
over 5 years ago
Helm uses crypto package vulnerable to panic from malformed X.509 certificate
go
helm.sh/helm/v3, golang.org/x/crypto, github.com/helm/helm
High
over 5 years ago
Improper Verification of Cryptographic Signature in golang.org/x/crypto
go
golang.org/x/crypto