Executive brief
The golang.org/x/crypto/openpgp package is unmaintained, unsafe by design, and has known security issues
Affected products
- Go golang.org/x/crypto
Junglewise Threat Intelligence
GO-2026-5932 - The golang.org/x/crypto/openpgp package is unmaintained, unsafe by design, and has known security issues
Severity: info · Published 2026-07-07
Technologies: golang.org/x/crypto (Go). Vendors: Go.
Related threats
- Go SSH deadlock vulnerability in channel handling
- Go x/crypto/ssh deadlock denial of service on undecided channel
- Go SSH source-address permission validation bypass in authentication callbacks
- Go x/crypto denial of service in SSH agent Ed25519 parsing
- Go x/crypto/ssh denial of service in AES-GCM decoder