Executive brief
Unbounded memory consumption in golang.org/x/crypto/ssh
Affected products
- Go golang.org/x/crypto
Junglewise Threat Intelligence
CVE-2025-58181: GO-2025-4134 - Unbounded memory consumption in golang.org/x/crypto/ssh
CVE-2025-58181 · Severity: low · CVSS 3.1 · Published 2025-11-19
Technologies: golang.org/x/crypto (Go). Vendors: Go.
Related threats
- Go SSH deadlock vulnerability in channel handling
- Go x/crypto/ssh deadlock denial of service on undecided channel
- Go SSH source-address permission validation bypass in authentication callbacks
- GO-2026-5932 - The golang.org/x/crypto/openpgp package is unmaintained, unsafe by design, and has known security issues
- Go x/crypto denial of service in SSH agent Ed25519 parsing