GO-2025-4134 — Vulnetix

GO-2025-4134 PUBLISHED

Unbounded memory consumption in golang.org/x/crypto/ssh

Affected Products

Vendor	Product	Versions
golang.org	x/crypto	0, 0

Timeline

Nov 19, 2025 CVE Published
May 15, 2026 CVE Updated

References

https://groups.google.com/g/golang-announce/c/w-oX3UxNcZA advisory
https://go.dev/cl/721961 patch
https://go.dev/issue/76363 report

Open in Interactive Console →

$ Console Community · 100/wk Open console ›