| Package | Affected versions | Patched versions |
|---|---|---|
| golang.org/x/crypto | < 0.52.0 | 0.52.0 |
| crypto | < 0.52.0 | 0.52.0 |
SSH servers which use CertChecker as a public key callback without setting IsUserAuthority or IsHostAuthority could be caused to panic by a client presenting a certificate. CertChecker now returns an error instead of panicking when these callbacks are nil.
Running one of these products? Scan your site to see whether it exposes a vulnerable version.
Scan my site free