golang.org/x/crypto: Source-address critical option not enforced for non-public-key auth callbacks in golang.org/x/crypto/ssh
Source-address critical option not enforced for non-public-key auth callbacks in golang.org/x/crypto/ssh. GO-2026-6303, CVE-2026-56854.
osv.devquote checked- security advisory
- Your code2 things to find
Nemotron fixes
In its own wordsmatches the page ✓
Source-address critical option not enforced for non-public-key auth callbacks in golang.org/x/crypto/ssh
What Teire looks for in your code
- golang.org/x/crypto/ssh.NewServerConn (go)
- golang.org/x/crypto/ssh.connection.serverAuthenticate (go)
Does it reach your code?