Approved changes feed: RSS · Atom

cpe:2.3:a:golang:crypto:*:*:*:*:*:go:*:*

part: a version: * update: *

VendorGolang (670356c5-bd1b-5c66-9eee-f755f5cec4c7)
ProductCrypto (99fd0f5b-4e59-5e43-bc26-9b0afe2f647f)
Edition*
Language*
Software edition*
Target softwarego
Target hardware*
Other*
NotesImported from gcve-enriched-dumps CVE data

PURL mappings

PURLSourceLast updated
No PURL mappings for this CPE yet.

Vulnerability references

IdentifiercpeApplicabilitySubmitteddb.gcve.eu detailsRationale
CVE:CVE-2025-58181 vulnerable 2026-06-03 15:06:20.853321 Unbounded memory consumption in golang.org/x/crypto/ssh
SSH servers parsing GSSAPI authentication requests do not validate the number of mechanisms specified in the request, allowing an attacker to cause unbounded memory consumption.
Published: 2025-11-19T20:33:42.795Z
Updated: 2025-11-20T17:14:59.856Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2025-47914 vulnerable 2026-06-03 15:01:33.618523 Malformed constraint may cause denial of service in golang.org/x/crypto/ssh/agent
SSH Agent servers do not validate the size of messages when processing new identity requests, which may cause the program to panic if the message is malformed due to an out of bounds read.
Published: 2025-11-19T20:33:43.126Z
Updated: 2025-11-20T17:15:00.344Z
Reference links
Imported from gcve-enriched-dumps CVE data

Contribute

You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.