GO
Product
golang.org/x/crypto/ssh/knownhosts
by golang.org/x/crypto · last CVE May 22, 2026
1
CVEs
0
On KEV
9.1
Max CVSS
0
New 30D
Severity mix
Critical 1High 0Medium 0Low 0
Watch

Add golang.org/x/crypto/ssh/knownhosts to your stack to get only the CVEs that touch what you run.

CVECVSSEPSSPublishedSummary · affected versions
CVE-2026-42508
9.1
7%
May 22
Invoking auth bypass via unenforced @revoked status in golang.org/x/crypto/ssh/knownhosts
Affected: before 0.52.0
Showing 1