Teire
Changes
Scan
Docs
Trust
← All changes
golang.org/x/crypto (Go) · Teire
Changes
Scan
Docs
Trust
Sign in
Worker running
golang.org/x/crypto
Go
latest
v0.58.0
· 2026-10-09
pkg.go.dev · all 1636 versions
Security advisories
21
golang.org/x/crypto: golang.org/x/crypto vulnerable to invoking bypass of certificate restrictions
fixed in v0.52.0
golang.org/x/crypto: Potential denial of service in golang.org/x/crypto/ssh/agent
fixed in v0.43.0
golang.org/x/crypto: golang.org/x/crypto vulnerable to auth bypass via unenforced @revoked status
fixed in v0.52.0
golang.org/x/crypto: golang.org/x/crypto is vulnerable to invoking server panic during CheckHostKey/Authenticate flow
fixed in v0.52.0
Versions that change something
v0.35.0
2025-02
fixes 1 advisory
v0.43.0
2025-10
fixes 1 advisory
v0.45.0
2025-11
fixes 2 advisories
v0.52.0
2026-05
fixes 13 advisories
What each upgrade changes in its API
Changes types
●
breaks on upgrade
→ v0.58.0
· 1
golang.org/x/crypto: golang.org/x/crypto: FIDO/U2F security key physical presence check can be bypassed
fixed in v0.52.0
golang.org/x/crypto: golang.org/x/crypto: Invoking pathological inputs can lead to client panic
fixed in v0.52.0
golang.org/x/crypto: golang.org/x/crypto doesn't drop invoking agent constraints when forwarding keys
fixed in v0.52.0
golang.org/x/crypto: golang.org/x/crypto/ssh/agent vulnerable to panic if message is malformed due to out of bounds read
fixed in v0.45.0
golang.org/x/crypto: golang.org/x/crypto Vulnerable to Denial of Service (DoS) via Slow or Incomplete Key Exchange
fixed in v0.35.0
golang.org/x/crypto: golang.org/x/crypto/ssh allows an attacker to cause unbounded memory consumption
fixed in v0.45.0
golang.org/x/crypto: golang.org/x/crypto doesn't enforce invoking key constraints
fixed in v0.52.0
golang.org/x/crypto: golang.org/x/crypto: Invoking byte arithmetic causes underflow and panic
fixed in v0.52.0
golang.org/x/crypto: golang.org/x/crypto: Invoking memory leak when rejecting channels can lead to DoS
fixed in v0.52.0
golang.org/x/crypto: golang.org/x/crypto vulnerable to infinite loop on large channel writes
fixed in v0.52.0
golang.org/x/crypto: golang.org/x/crypto: Invoking client can cause server deadlock on unexpected responses
fixed in v0.52.0
golang.org/x/crypto: golang.org/x/crypto: Invoking pathological RSA/DSA parameters may cause DoS
fixed in v0.52.0
golang.org/x/crypto: golang.org/x/crypto: Invoking VerifiedPublicKeyCallback permissions skip enforcement
fixed in v0.52.0
golang.org/x/crypto: The golang.org/x/crypto/openpgp package is unmaintained, unsafe by design, and has known security issues
fixed in v0.58.1-0.20261009181718-2f1f834330b2
golang.org/x/crypto: Source-address critical option not enforced for non-public-key auth callbacks in golang.org/x/crypto/ssh
fixed in v0.55.0
golang.org/x/crypto: Prevent DoS on deadlocked undecided channel in golang.org/x/crypto/ssh
fixed in v0.56.0
golang.org/x/crypto: Prevent DoS on deadlocked established channel in golang.org/x/crypto/ssh
fixed in v0.56.0
v0.55.0
2026-08
fixes 1 advisory
v0.56.0
2026-09
fixes 2 advisories
v0.58.0
latest
2026-10
1 change
1 breaking
v0.58.1-0.20261009181718-2f1f834330b2
2026-10
fixes 1 advisory