[{"data":1,"prerenderedAt":-1},["ShallowReactive",2],{"repo-stars":3,"vuln-CVE-2026-39832":6},{"stargazers_count":4,"fetched_at":5},7,"2026-08-01T00:21:03.480Z",{"id":7,"descriptions":8,"cisa":9,"weaknesses":10,"exploits":29,"aliases":30,"duplicate_of":9,"upstream":33,"downstream":34,"duplicates":143,"related":144,"reserved_at":9,"published_at":198,"modified_at":199,"state":200,"summary":201,"references_raw":210,"kevs":352,"epss":353,"epss_history":356,"metrics":493,"affected":503},"CVE-2026-39832","When adding a key to a remote agent constraint extensions such as restrict-destination-v00@openssh.com were not serialized in the request. Destination restrictions were silently stripped when forwarding keys, allowing unrestricted use of the key on the remote host. The client now serializes all constraint extensions. Additionally, the in-memory keyring returned by NewKeyring() now rejects keys with unsupported constraint extensions instead of silently ignoring them.",null,[11,24],{"_key":12,"id":12,"name":13,"description":14,"type":15,"status":16,"abstraction":17,"likelihood_of_exploit":18,"capec":19},"CWE-502","Deserialization of Untrusted Data","The product deserializes untrusted data without sufficiently ensuring that the resulting data will be valid.","weakness","Draft","Base","Medium",[20],{"id":21,"name":22,"techniques":23},"CAPEC-586","Object Injection",[],{"_key":25,"id":25,"name":26,"description":27,"type":15,"status":16,"abstraction":17,"likelihood_of_exploit":9,"capec":28},"CWE-281","Improper Preservation of Permissions","The product does not preserve permissions or incorrectly preserves permissions when copying, restoring, or sharing objects, which can cause them to have less restrictive permissions than intended.",[],[],[31,32],"GO-2026-5006","GHSA-f5wc-c3c7-36mc",[],[35,37,39,41,43,45,47,49,51,53,55,57,59,61,63,65,67,69,71,73,75,77,79,81,83,85,87,89,91,93,95,97,99,101,103,105,107,109,111,113,115,117,119,121,123,125,127,129,131,133,135,137,139,141],{"_key":36},"OPENSUSE-SU-2026:10842-1",{"_key":38},"OPENSUSE-SU-2026:10845-1",{"_key":40},"OPENSUSE-SU-2026:10856-1",{"_key":42},"OPENSUSE-SU-2026:10949-1",{"_key":44},"SUSE-SU-2026:22074-1",{"_key":46},"SUSE-SU-2026:22065-1",{"_key":48},"DEBIAN-CVE-2026-39832",{"_key":50},"OPENSUSE-SU-2026:20956-1",{"_key":52},"USN-8447-1",{"_key":54},"SUSE-SU-2026:2468-1",{"_key":56},"SUSE-SU-2026:2467-1",{"_key":58},"SUSE-SU-2026:22193-1",{"_key":60},"SUSE-SU-2026:22226-1",{"_key":62},"SUSE-SU-2026:2581-1",{"_key":64},"SUSE-SU-2026:22157-1",{"_key":66},"SUSE-SU-2026:22159-1",{"_key":68},"SUSE-SU-2026:2609-1",{"_key":70},"SUSE-SU-2026:2611-1",{"_key":72},"SUSE-SU-2026:2612-1",{"_key":74},"OPENSUSE-SU-2026:11126-1",{"_key":76},"SUSE-SU-2026:22249-1",{"_key":78},"SUSE-SU-2026:22242-1",{"_key":80},"SUSE-SU-2026:2665-1",{"_key":82},"SUSE-SU-2026:22376-1",{"_key":84},"SUSE-SU-2026:22423-1",{"_key":86},"SUSE-SU-2026:22442-1",{"_key":88},"SUSE-SU-2026:22451-1",{"_key":90},"SUSE-SU-2026:22516-1",{"_key":92},"SUSE-SU-2026:2706-1",{"_key":94},"SUSE-SU-2026:2733-1",{"_key":96},"SUSE-SU-2026:2824-1",{"_key":98},"SUSE-SU-2026:2827-1",{"_key":100},"OPENSUSE-SU-2026:21069-1",{"_key":102},"OPENSUSE-SU-2026:21079-1",{"_key":104},"OPENSUSE-SU-2026:21084-1",{"_key":106},"OPENSUSE-SU-2026:21120-1",{"_key":108},"OPENSUSE-SU-2026:21210-1",{"_key":110},"OPENSUSE-SU-2026:21244-1",{"_key":112},"OPENSUSE-SU-2026:21251-1",{"_key":114},"SUSE-SU-2026:22558-1",{"_key":116},"SUSE-SU-2026:22575-1",{"_key":118},"SUSE-SU-2026:22613-1",{"_key":120},"SUSE-SU-2026:3056-1",{"_key":122},"RHSA-2026:35833",{"_key":124},"RHSA-2026:36199",{"_key":126},"RHSA-2026:36796",{"_key":128},"RHSA-2026:37072",{"_key":130},"RHSA-2026:37123",{"_key":132},"RHSA-2026:37410",{"_key":134},"RHSA-2026:41019",{"_key":136},"UBUNTU-CVE-2026-39832",{"_key":138},"OPENSUSE-SU-2026:11305-1",{"_key":140},"OPENSUSE-SU-2026:11314-1",{"_key":142},"OPENSUSE-SU-2026:21281-1",[],[145,146,147,148,149,150,151,152,153,154,155,156,157,158,159,160,161,162,163,164,165,166,167,168,169,170,171,172,173,174,175,176,177,178,179,180,181,182,183,184,185,186,187,188,189,190,191,192,193,194,195,196],{"_key":36},{"_key":38},{"_key":40},{"_key":42},{"_key":44},{"_key":46},{"_key":50},{"_key":54},{"_key":56},{"_key":58},{"_key":60},{"_key":62},{"_key":64},{"_key":66},{"_key":68},{"_key":70},{"_key":72},{"_key":74},{"_key":76},{"_key":78},{"_key":80},{"_key":82},{"_key":84},{"_key":86},{"_key":88},{"_key":90},{"_key":92},{"_key":94},{"_key":96},{"_key":98},{"_key":100},{"_key":102},{"_key":104},{"_key":106},{"_key":108},{"_key":110},{"_key":112},{"_key":114},{"_key":116},{"_key":118},{"_key":120},{"_key":122},{"_key":124},{"_key":126},{"_key":128},{"_key":130},{"_key":132},{"_key":134},{"_key":138},{"_key":140},{"_key":142},{"_key":197},"CGA-JW4W-5J43-RPWR","2026-05-22T02:31:26.660Z","2026-07-22T12:08:49.924Z","Analyzed",{"cisa_kev":202,"cisa_ransomware":202,"cisa_vendor":9,"epss_severity":203,"epss_score":204,"severity":205,"severity_score":206,"severity_version":207,"severity_source":208,"severity_vector":209,"severity_status":200},false,"low",0.00338,"critical",9.1,"v3.1","cve.org","CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:N",[211,220,225,230,235,240,245,251,255,260,264,268,272,276,280,284,288,292,296,300,304,308,312,316,320,324,328,332,336,340,344,348],{"url":212,"sources":213,"tags":216},"https://go.dev/issue/79435",[208,214,215],"nvd","osv_go",[217,218,219],"REPORT","Issue Tracking","WEB",{"url":221,"sources":222,"tags":223},"https://go.dev/cl/778642",[208,214,215],[224,218,219],"FIX",{"url":226,"sources":227,"tags":228},"https://groups.google.com/g/golang-announce/c/a082jnz-LvI",[208,214,215],[219,229],"Mailing List",{"url":231,"sources":232,"tags":233},"https://pkg.go.dev/vuln/GO-2026-5006",[208,214,215],[234,219],"Vendor Advisory",{"url":236,"sources":237,"tags":238},"https://nvd.nist.gov/vuln/detail/CVE-2026-39832",[215],[239],"Advisory",{"url":241,"sources":242,"tags":243},"https://cs.opensource.google/go/x/crypto",[215],[244],"PACKAGE",{"url":246,"sources":247,"tags":248},"https://access.redhat.com/security/cve/CVE-2026-39832",[208,215],[249,250,219],"VDB Entry","X Refsource REDHAT",{"url":252,"sources":253,"tags":254},"https://bugzilla.redhat.com/show_bug.cgi?id=2480685",[208,215],[218,250,219],{"url":256,"sources":257,"tags":258},"https://security.access.redhat.com/data/csaf/v2/vex/2026/cve-2026-39832.json",[208,215],[259,219],"X Sadp Csaf Vex",{"url":261,"sources":262,"tags":263},"https://access.redhat.com/errata/RHSA-2026:36199",[208,215],[234,250,219],{"url":265,"sources":266,"tags":267},"https://access.redhat.com/errata/RHSA-2026:35833",[208,215],[234,250,219],{"url":269,"sources":270,"tags":271},"https://access.redhat.com/errata/RHSA-2026:36625",[208,215],[234,250,219],{"url":273,"sources":274,"tags":275},"https://access.redhat.com/errata/RHSA-2026:36319",[208,215],[234,250,219],{"url":277,"sources":278,"tags":279},"https://access.redhat.com/errata/RHSA-2026:36648",[208,215],[234,250,219],{"url":281,"sources":282,"tags":283},"https://access.redhat.com/errata/RHSA-2026:36796",[208,215],[234,250,219],{"url":285,"sources":286,"tags":287},"https://access.redhat.com/errata/RHSA-2026:37072",[208,215],[234,250,219],{"url":289,"sources":290,"tags":291},"https://access.redhat.com/errata/RHSA-2026:37123",[208,215],[234,250,219],{"url":293,"sources":294,"tags":295},"https://access.redhat.com/errata/RHSA-2026:36651",[208,215],[234,250,219],{"url":297,"sources":298,"tags":299},"https://access.redhat.com/errata/RHSA-2026:36797",[208,215],[234,250,219],{"url":301,"sources":302,"tags":303},"https://access.redhat.com/errata/RHSA-2026:37271",[208,215],[234,250,219],{"url":305,"sources":306,"tags":307},"https://access.redhat.com/errata/RHSA-2026:37410",[208,215],[234,250,219],{"url":309,"sources":310,"tags":311},"https://access.redhat.com/errata/RHSA-2026:37387",[208,215],[234,250,219],{"url":313,"sources":314,"tags":315},"https://access.redhat.com/errata/RHSA-2026:41019",[208,215],[234,250,219],{"url":317,"sources":318,"tags":319},"https://access.redhat.com/errata/RHSA-2026:40945",[208,215],[234,250,219],{"url":321,"sources":322,"tags":323},"https://access.redhat.com/errata/RHSA-2026:40118",[208,215],[234,250,219],{"url":325,"sources":326,"tags":327},"https://access.redhat.com/errata/RHSA-2026:41036",[208,215],[234,250,219],{"url":329,"sources":330,"tags":331},"https://access.redhat.com/errata/RHSA-2026:41031",[208,215],[234,250,219],{"url":333,"sources":334,"tags":335},"https://access.redhat.com/errata/RHSA-2026:41066",[208,215],[234,250,219],{"url":337,"sources":338,"tags":339},"https://access.redhat.com/errata/RHSA-2026:40262",[208,215],[234,250,219],{"url":341,"sources":342,"tags":343},"https://access.redhat.com/errata/RHSA-2026:40972",[208,215],[234,250,219],{"url":345,"sources":346,"tags":347},"https://access.redhat.com/errata/RHSA-2026:42146",[208,215],[234,250,219],{"url":349,"sources":350,"tags":351},"https://access.redhat.com/errata/RHSA-2026:42796",[208],[234,250],[],{"date":354,"score":204,"percentile":355},"2026-07-05",0.25763,[357,361,365,368,371,374,377,381,385,388,390,393,396,398,401,404,407,410,413,416,419,421,424,427,430,434,437,440,443,446,449,452,455,459,462,465,468,471,474,477,480,483,486,489,492],{"date":358,"score":359,"percentile":360},"2026-05-22",0.00016,0.04099,{"date":362,"score":363,"percentile":364},"2026-05-23",0.0003,0.08845,{"date":366,"score":363,"percentile":367},"2026-05-24",0.08849,{"date":369,"score":363,"percentile":370},"2026-05-25",0.08838,{"date":372,"score":363,"percentile":373},"2026-05-26",0.08833,{"date":375,"score":363,"percentile":376},"2026-05-27",0.08889,{"date":378,"score":379,"percentile":380},"2026-05-28",0.00039,0.11985,{"date":382,"score":383,"percentile":384},"2026-05-29",0.00068,0.211,{"date":386,"score":383,"percentile":387},"2026-05-30",0.21107,{"date":389,"score":383,"percentile":384},"2026-05-31",{"date":391,"score":383,"percentile":392},"2026-06-01",0.21075,{"date":394,"score":383,"percentile":395},"2026-06-02",0.21078,{"date":397,"score":383,"percentile":395},"2026-06-03",{"date":399,"score":383,"percentile":400},"2026-06-04",0.21088,{"date":402,"score":383,"percentile":403},"2026-06-05",0.21171,{"date":405,"score":383,"percentile":406},"2026-06-06",0.21158,{"date":408,"score":383,"percentile":409},"2026-06-07",0.21115,{"date":411,"score":383,"percentile":412},"2026-06-08",0.21051,{"date":414,"score":383,"percentile":415},"2026-06-09",0.21061,{"date":417,"score":383,"percentile":418},"2026-06-10",0.21076,{"date":420,"score":383,"percentile":387},"2026-06-11",{"date":422,"score":383,"percentile":423},"2026-06-12",0.21289,{"date":425,"score":383,"percentile":426},"2026-06-13",0.21303,{"date":428,"score":383,"percentile":429},"2026-06-14",0.21281,{"date":431,"score":432,"percentile":433},"2026-06-15",0.0033,0.2449,{"date":435,"score":432,"percentile":436},"2026-06-16",0.24523,{"date":438,"score":432,"percentile":439},"2026-06-17",0.24543,{"date":441,"score":432,"percentile":442},"2026-06-18",0.24564,{"date":444,"score":432,"percentile":445},"2026-06-19",0.24556,{"date":447,"score":432,"percentile":448},"2026-06-20",0.24546,{"date":450,"score":432,"percentile":451},"2026-06-21",0.24527,{"date":453,"score":432,"percentile":454},"2026-06-22",0.24499,{"date":456,"score":457,"percentile":458},"2026-06-23",0.00397,0.31428,{"date":460,"score":457,"percentile":461},"2026-06-24",0.31459,{"date":463,"score":457,"percentile":464},"2026-06-25",0.31545,{"date":466,"score":457,"percentile":467},"2026-06-26",0.31588,{"date":469,"score":457,"percentile":470},"2026-06-27",0.31625,{"date":472,"score":457,"percentile":473},"2026-06-28",0.31602,{"date":475,"score":457,"percentile":476},"2026-06-29",0.31605,{"date":478,"score":204,"percentile":479},"2026-06-30",0.25597,{"date":481,"score":204,"percentile":482},"2026-07-01",0.25705,{"date":484,"score":204,"percentile":485},"2026-07-02",0.25728,{"date":487,"score":204,"percentile":488},"2026-07-03",0.25737,{"date":490,"score":204,"percentile":491},"2026-07-04",0.25751,{"date":354,"score":204,"percentile":355},[494,499,501],{"source":208,"cvss_v2_0":9,"cvss_v3_0":9,"cvss_v3_1":495,"cvss_v4_0":9},{"baseScore":206,"baseSeverity":496,"vectorString":209,"impactScore":497,"exploitabilityScore":498},"CRITICAL",8.7,10,{"source":214,"cvss_v2_0":9,"cvss_v3_0":9,"cvss_v3_1":500,"cvss_v4_0":9},{"baseScore":206,"baseSeverity":496,"vectorString":209,"impactScore":497,"exploitabilityScore":498},{"source":215,"cvss_v2_0":9,"cvss_v3_0":9,"cvss_v3_1":502,"cvss_v4_0":9},{"baseScore":206,"baseSeverity":9,"vectorString":209,"impactScore":497,"exploitabilityScore":498},[504,515,523,529],{"ecosystem":9,"name":505,"vendor":506,"product":505,"cpe_part":507,"purl_type":9,"purl_namespace":9,"purl_name":9,"source":9,"versions":508},"crypto","golang","a",[509],{"version":510,"is_range":511,"range_type":512,"version_start":9,"version_start_type":9,"version_end":513,"version_end_type":514,"fixed_in":9},"lt0.52.0",true,"cpe","0.52.0","excluding",{"ecosystem":516,"name":517,"vendor":518,"product":505,"cpe_part":9,"purl_type":506,"purl_namespace":518,"purl_name":505,"source":9,"versions":519},"Go","golang.org/x/crypto","golang.org/x",[520],{"version":521,"is_range":511,"range_type":522,"version_start":9,"version_start_type":9,"version_end":513,"version_end_type":514,"fixed_in":9},"lt0_52_0","semver",{"ecosystem":516,"name":524,"vendor":525,"product":526,"cpe_part":9,"purl_type":506,"purl_namespace":525,"purl_name":526,"source":9,"versions":527},"golang.org/x/crypto/ssh/agent","golang.org/x/crypto/ssh","agent",[528],{"version":521,"is_range":511,"range_type":522,"version_start":9,"version_start_type":9,"version_end":513,"version_end_type":514,"fixed_in":9},{"ecosystem":9,"name":524,"vendor":517,"product":524,"cpe_part":507,"purl_type":9,"purl_namespace":9,"purl_name":9,"source":9,"versions":530},[531],{"version":532,"is_range":511,"range_type":208,"version_start":9,"version_start_type":9,"version_end":513,"version_end_type":514,"fixed_in":9},"\u003C 0.52.0"]