An open index of dependabot pull requests across open source projects.

golang.org/x/crypto

Ecosystem:
go
Package URL:
pkg:golang/golang.org/x/crypto
Total PRs:
15,541 Dependabot PRs
Latest PR:
about 23 hours ago
Unique Repositories:
8,031 repositories
Unique Repos (30 days):
55 repositories
Security Advisories
Misuse of ServerConfig.PublicKeyCallback may cause authorization bypass in golang.org/x/crypto
GHSA-v778-237x-gjrc CVE-2024-45337 CRITICAL published almost 2 years ago • updated 2 days ago
Applications and libraries which misuse the ServerConfig.PublicKeyCallback callback may be susceptible to an authorization bypass. The documentati...
golang.org/x/crypto/ssh Man-in-the-Middle attack
GHSA-xhjq-w7xm-p8qj CVE-2017-3204 HIGH published almost 4 years ago • updated about 1 month ago
The Go SSH library (golang.org/x/crypto/ssh) by default does not verify host keys, facilitating man-in-the-middle attacks if ClientConfig.HostKeyCa...
golang.org/x/crypto: Invoking client can cause server deadlock on unexpected responses
GHSA-vgwf-h737-ff37 CVE-2026-39830 CRITICAL published 5 months ago • updated 9 days ago
A malicious SSH peer could send unsolicited global request responses to fill an internal buffer, blocking the connection's read loop. The blocked g...
golang.org/x/crypto doesn't drop invoking agent constraints when forwarding keys
GHSA-f5wc-c3c7-36mc CVE-2026-39832 CRITICAL published 5 months ago • updated 9 days ago
When adding a key to a remote agent constraint extensions such as restrict-destination-v00@openssh.com were not serialized in the request. Destinat...
golang.org/x/crypto: Invoking pathological inputs can lead to client panic
GHSA-9m57-25v3-79x9 CVE-2026-46598 MODERATE published 5 months ago • updated 9 days ago
For certain crafted inputs, a 'ed25519.PrivateKey' was created by casting malformed wire bytes, leading to a panic when used.
Recent PRs
Package Details
Name: golang.org/x/crypto
Ecosystem: go
PURL Type: golang
Package URL: pkg:golang/golang.org/x/crypto
JSON API: View JSON
Security Advisories

26

Active advisories
CRITICAL 8
HIGH 9
MODERATE 9
View All golang Advisories
Package Information
Description:

Homepage: https://cs.opensource.google/go/x/crypto
Latest Release: v0.39.0
over 1 year ago
Dependent Repos: 269,003
Dependent Packages: 125,672
Ranking: Top 0.0007% by dependent repos Top 0.0002% by dependent pkgs
PR Status
Open 6,422 (41.3%)
Merged 2,249 (14.5%)
Closed 5,584 (35.9%)
PR Types
Minor 14,217 (91.5%)