An open index of dependabot pull requests across open source projects.

golang.org/x/crypto

Ecosystem:
go
Package URL:
pkg:golang/golang.org/x/crypto
Total PRs:
15,539 Dependabot PRs
Latest PR:
1 day ago
Unique Repositories:
8,029 repositories
Unique Repos (30 days):
60 repositories
Security Advisories
golang.org/x/crypto: FIDO/U2F security key physical presence check can be bypassed
GHSA-89gr-r52h-f8rx CVE-2026-39831 CRITICAL published 5 months ago • updated 2 days ago
The Verify() method for FIDO/U2F security key types (sk-ecdsa-sha2-nistp256@openssh.com, sk-ssh-ed25519@openssh.com) did not check the User Presenc...
Improper Verification of Cryptographic Signature in golang.org/x/crypto
GHSA-ffhg-7mh4-33c4 CVE-2020-9283 HIGH published over 5 years ago • updated 5 days ago
golang.org/x/crypto before v0.0.0-20200220183623-bac4c82f6975 for Go allows a panic during signature verification in the golang.org/x/crypto/ssh pa...
Helm uses crypto package vulnerable to panic from malformed X.509 certificate
GHSA-cjjc-xp8v-855w CVE-2020-7919 HIGH published over 5 years ago • updated about 1 hour ago
The Helm core maintainers have identified a high severity security vulnerability in Go's `crypto` package affecting all versions prior to Helm 2.16...
Misuse of ServerConfig.PublicKeyCallback may cause authorization bypass in golang.org/x/crypto
GHSA-v778-237x-gjrc CVE-2024-45337 CRITICAL published almost 2 years ago • updated about 12 hours ago
Applications and libraries which misuse the ServerConfig.PublicKeyCallback callback may be susceptible to an authorization bypass. The documentati...
golang.org/x/crypto/ssh Man-in-the-Middle attack
GHSA-xhjq-w7xm-p8qj CVE-2017-3204 HIGH published almost 4 years ago • updated 29 days ago
The Go SSH library (golang.org/x/crypto/ssh) by default does not verify host keys, facilitating man-in-the-middle attacks if ClientConfig.HostKeyCa...
Recent PRs
Package Details
Name: golang.org/x/crypto
Ecosystem: go
PURL Type: golang
Package URL: pkg:golang/golang.org/x/crypto
JSON API: View JSON
Security Advisories

26

Active advisories
CRITICAL 8
HIGH 9
MODERATE 9
View All golang Advisories
Package Information
Description:

Homepage: https://cs.opensource.google/go/x/crypto
Latest Release: v0.39.0
over 1 year ago
Dependent Repos: 269,003
Dependent Packages: 125,672
Ranking: Top 0.0007% by dependent repos Top 0.0002% by dependent pkgs
PR Status
Open 6,422 (41.3%)
Merged 2,249 (14.5%)
Closed 5,582 (35.9%)
PR Types
Minor 14,215 (91.5%)