CVE-2026-46598

Опубликовано: 22 мая 2026

Источник: nvd

CVSS3: 5.3

EPSS Низкий

Описание

For certain crafted inputs, a 'ed25519.PrivateKey' was created by casting malformed wire bytes, leading to a panic when used.

Ссылки

https://go.dev/cl/781360
Issue Tracking
https://go.dev/issue/79596
Issue Tracking
https://groups.google.com/g/golang-announce/c/a082jnz-LvI
Mailing List
https://pkg.go.dev/vuln/GO-2026-5033
Vendor Advisory

Уязвимые конфигурации

Конфигурация 1

cpe:2.3:a:golang:crypto:*:*:*:*:*:go:*:*

Версия до 0.52.0 (исключая)

EPSS

Процентиль: 34%

0.00412

Низкий

5.3 Medium

CVSS3

Дефекты

CWE-129

Связанные уязвимости

CVE-2026-46598

CVSS3: 5.3

ubuntu

2 месяца назад

For certain crafted inputs, a 'ed25519.PrivateKey' was created by casting malformed wire bytes, leading to a panic when used.

CVE-2026-46598

CVSS3: 5.3

redhat

3 месяца назад

For certain crafted inputs, a 'ed25519.PrivateKey' was created by casting malformed wire bytes, leading to a panic when used.

CVE-2026-46598

CVSS3: 5.3

msrc

2 месяца назад

Invoking pathological inputs can lead to client panic in golang.org/x/crypto/ssh/agent

CVE-2026-46598

CVSS3: 5.3

debian

2 месяца назад

For certain crafted inputs, a 'ed25519.PrivateKey' was created by cast ...

GHSA-9m57-25v3-79x9

CVSS3: 5.3

github

около 1 месяца назад

golang.org/x/crypto: Invoking pathological inputs can lead to client panic

EPSS

Процентиль: 34%

0.00412

Низкий

5.3 Medium

CVSS3

Дефекты

CWE-129