medium5.3
CVE-2026-46598
For certain crafted inputs, a 'ed25519.PrivateKey' was created by casting malformed wire bytes, leading to a panic when used.
Impact
For certain crafted inputs, a 'ed25519.PrivateKey' was created by casting malformed wire bytes, leading to a panic when used.
Affected packages
| Ecosystem | Package | Affected | Fixed in |
|---|---|---|---|
| go | golang.org/x/crypto | < 0.52.0 | 0.52.0 |
Affected products
| Vendor | Product | Affected versions |
|---|---|---|
| Golang | Crypto | before 0.52.0 |