~ / search / GHSA-56w8-48fp-6mgv

GHSA-56w8-48fp-6mgv

golang.org/x/crypto/ssh/agent has a potential denial of service

Source: GitHub Advisory Database (reviewed) High CVE-2025-47913

Packages

EcosystemPackageAffectedFixed in
Go golang.org/x/crypto/ssh/agent < 0.43.0 0.43.0

Details

As written in the advisory (Markdown source, shown as plain text).

SSH clients receiving SSH_AGENT_SUCCESS when expecting a typed response will panic and cause early termination of the client process.

References

External links from the advisory. They lead to third-party sites.