CVE Intelligence

Vulnerabilidades do Golang.org/x/crypto Golang.org/x/crypto/ssh/knownhosts

🔔 Criar alerta RSS Verificador de versão

CVEs publicadas que afetam Golang.org/x/crypto Golang.org/x/crypto/ssh/knownhosts: 1 registro(s), com versões afetadas e correções.

CVE-2026-42508 Crítica · 9.1 CWE-295 22/05/2026
Invoking auth bypass via unenforced @revoked status in golang.org/x/crypto/ssh/knownhosts
Previously, a revoked 'SignatureKey' belonging to a CA was not correctly checked for revocation. Now, both the 'key' and 'key.SignatureKey' are checked for @revoked.