Golang.Org/X/Crypto/Ssh/Knownhosts vulnerabilities

1 vulnerability

Known vulnerabilities in Golang.Org/X/Crypto/Ssh/Knownhosts, newest first, with CVSS severity, EPSS, KEV listings, ransomware use and the affected versions.

PrioritiseCVE-2026-42508golang.org/x/crypto · golang.org/x/crypto/ssh/knownhosts +1624 moreInvoking auth bypass via unenforced @revoked status in golang.org/x/crypto/ssh/knownhostsPreviously, a revoked 'SignatureKey' belonging to a CA was not correctly checked for revocation. Now, both the 'key' and 'key.SignatureKey' are checked for @revoked.CVSS9.1CriticalEPSS6.91%