| Package | Affected versions | Patched versions |
|---|---|---|
| golang.org/x/crypto | < 0.52.0 | 0.52.0 |
| crypto | < 0.52.0 | 0.52.0 |
An incorrectly placed cast from bytes to int allowed for server-side panic in the AES-GCM packet decoder for well-crafted inputs.
Running one of these products? Scan your site to see whether it exposes a vulnerable version.
Scan my site free