https://cve.radiocsirt.org/rss/recent/all/10 Most recent entries from all 2026-10-10T11:40:03.261276+00:00 Vulnerability-Lookup csirt@opendfir.org python-feedgen Contains only the most 10 recent entries. https://cve.radiocsirt.org/vuln/ghsa-gwc9-m7rh-j2ww GHSA-gwc9-m7rh-j2ww — x/crypto/ssh vulnerable to panic via malformed packets 2026-10-10T11:40:03.278924+00:00

Affected: Go: golang.org/x/crypto

The x/crypto/ssh package before 0.0.0-20211202192323-5770296d904e of golang.org/x/crypto allows an unauthenticated attacker to panic an SSH server. When using AES-GCM or ChaCha20Poly1305, consuming a malformed packet which contains an empty plaintext causes a panic.