NetSight
IP …
medium5.3

CVE-2026-39835

SSH servers which use CertChecker as a public key callback without setting IsUserAuthority or IsHostAuthority could be caused to panic by a client presenting a…

Impact

SSH servers which use CertChecker as a public key callback without setting IsUserAuthority or IsHostAuthority could be caused to panic by a client presenting a certificate. CertChecker now returns an error instead of panicking when these callbacks are nil.

Affected packages

EcosystemPackageAffectedFixed in
gogolang.org/x/crypto< 0.52.00.52.0

Affected products

VendorProductAffected versions
GolangCrypto
before 0.52.0

Weakness classification

CWE-295CWE-476

References