Executive brief
Misleading message verification in golang.org/x/crypto/openpgp/clearsign
Affected products
- Go golang.org/x/crypto
Junglewise Threat Intelligence
CVE-2019-11841: GO-2023-1992 - Misleading message verification in golang.org/x/crypto/openpgp/clearsign
CVE-2019-11841 · Severity: low · CVSS 3.1 · Published 2023-08-23
Technologies: golang.org/x/crypto (Go). Vendors: Go.
Related threats
- Go SSH deadlock vulnerability in channel handling
- Go x/crypto/ssh deadlock denial of service on undecided channel
- Go SSH source-address permission validation bypass in authentication callbacks
- GO-2026-5932 - The golang.org/x/crypto/openpgp package is unmaintained, unsafe by design, and has known security issues
- Go x/crypto denial of service in SSH agent Ed25519 parsing