Executive brief
Malformed constraint may cause denial of service in golang.org/x/crypto/ssh/agent
Affected products
- Go golang.org/x/crypto
Junglewise Threat Intelligence
CVE-2025-47914: GO-2025-4135 - Malformed constraint may cause denial of service in golang.org/x/crypto/ssh/agent
CVE-2025-47914 · Severity: low · CVSS 3.1 · Published 2025-11-19
Technologies: golang.org/x/crypto (Go). Vendors: Go.
Related threats
- Go SSH deadlock vulnerability in channel handling
- Go x/crypto/ssh deadlock denial of service on undecided channel
- Go SSH source-address permission validation bypass in authentication callbacks
- GO-2026-5932 - The golang.org/x/crypto/openpgp package is unmaintained, unsafe by design, and has known security issues
- Go x/crypto denial of service in SSH agent Ed25519 parsing