high7.5
CVE-2025-47913
golang.org/x/crypto/ssh/agent has a potential denial of service
Impact
SSH clients receiving SSH_AGENT_SUCCESS when expecting a typed response will panic and cause early termination of the client process.
Affected packages
| Ecosystem | Package | Affected | Fixed in |
|---|---|---|---|
| go | golang.org/x/crypto/ssh/agent | < 0.43.0 | 0.43.0 |
Affected products
| Vendor | Product | Affected versions |
|---|---|---|
| Go | Ssh | before 0.43.0 |