GO
Product
golang.org/x/crypto/ssh
by golang.org/x/crypto · last CVE Sep 2, 2026
12
CVEs
0
On KEV
10.0
Max CVSS
0
New 30D
Severity mix
Critical 4High 5Medium 3Low 0
Watch

Add golang.org/x/crypto/ssh to your stack to get only the CVEs that touch what you run.

CVECVSSEPSSPublishedSummary · affected versions
CVE-2026-39827
6.5
0%
May 22
Invoking memory leak when rejecting channels can lead to DoS in golang.org/x/crypto/ssh
Affected: before 0.52.0
CVE-2026-39828
6.3
0%
May 22
Invoking bypass of certificate restrictions in golang.org/x/crypto/ssh
Affected: before 0.52.0
CVE-2026-39835
5.3
1%
May 22
Invoking server panic during CheckHostKey/Authenticate in golang.org/x/crypto/ssh
Affected: before 0.52.0
Showing 3