Логотип exploitDog
Консоль
Логотип exploitDog

exploitDog

github логотип

GHSA-9m57-25v3-79x9

Опубликовано: 25 июн. 2026
Источник: github
Github: Прошло ревью
CVSS3: 5.3

Описание

golang.org/x/crypto: Invoking pathological inputs can lead to client panic

For certain crafted inputs, a 'ed25519.PrivateKey' was created by casting malformed wire bytes, leading to a panic when used.

Пакеты

Наименование

golang.org/x/crypto

go
Затронутые версииВерсия исправления

< 0.52.0

0.52.0

EPSS

Процентиль: 34%
0.00412
Низкий

5.3 Medium

CVSS3

Дефекты

CWE-129

Связанные уязвимости

CVSS3: 5.3
ubuntu
2 месяца назад

For certain crafted inputs, a 'ed25519.PrivateKey' was created by casting malformed wire bytes, leading to a panic when used.

CVSS3: 5.3
redhat
3 месяца назад

For certain crafted inputs, a 'ed25519.PrivateKey' was created by casting malformed wire bytes, leading to a panic when used.

CVSS3: 5.3
nvd
2 месяца назад

For certain crafted inputs, a 'ed25519.PrivateKey' was created by casting malformed wire bytes, leading to a panic when used.

CVSS3: 5.3
msrc
2 месяца назад

Invoking pathological inputs can lead to client panic in golang.org/x/crypto/ssh/agent

CVSS3: 5.3
debian
2 месяца назад

For certain crafted inputs, a 'ed25519.PrivateKey' was created by cast ...

EPSS

Процентиль: 34%
0.00412
Низкий

5.3 Medium

CVSS3

Дефекты

CWE-129