How many golang.org golang.org/x/crypto CVEs are in CISA KEV?

None of golang.org golang.org/x/crypto's CVEs are currently listed in CISA's Known Exploited Vulnerabilities catalog.

Which versions of golang.org golang.org/x/crypto are affected?

33 distinct golang.org golang.org/x/crypto versions are named across its CVEs. Use the version filter above to see the CVEs affecting a specific version.

What are the most common weakness types in golang.org golang.org/x/crypto CVEs?

golang.org golang.org/x/crypto's CVEs most often map to these CWE weakness types: CWE-281 (Improper Preservation of Permissions), CWE-770 (Allocation of Resources Without Limits or Throttling), CWE-129 (Improper Validation of Array Index), CWE-295 (Improper Certificate Validation).

How many critical golang.org golang.org/x/crypto vulnerabilities are there?

golang.org golang.org/x/crypto has 8 critical and 13 high-severity CVEs.

What is the average severity of golang.org golang.org/x/crypto CVEs?

The average CVSS base score across golang.org golang.org/x/crypto's scored CVEs is 7.6.

golang.org golang.org/x/crypto Vulnerabilities: CVEs, CISA KEV & Security Advisories

Name: golang.org golang.org/x/crypto vulnerability dataset (CVEs)
Creator: RadicalNotion.AI
License: https://creativecommons.org/licenses/by-nc/4.0/

RadicalNotion.AI

golang.org golang.org/x/crypto Vulnerabilities: CVEs, CISA KEV & Security Advisories

Overview

golang.org golang.org/x/crypto has 28 published CVE records since 2017, of which 0 are in CISA's Known Exploited Vulnerabilities catalog and 4 have a known public exploit. The average CVSS base score across scored CVEs is 7.6.

This page aggregates every publicly disclosed vulnerability (CVE) affecting golang.org golang.org/x/crypto, with a severity breakdown, the affected and patched versions, the most common weakness types, and the full CVE list.

Severity and exploitation

How the CVSS severity of golang.org golang.org/x/crypto's CVEs breaks down, plus how many are exploited in the wild or have public exploit code.

Critical8

High13

Medium7

Low0

In CISA’s Known Exploited Vulnerabilities catalog

None of golang.org golang.org/x/crypto's CVEs are currently listed in CISA's KEV catalog.

Public exploits

4 of golang.org golang.org/x/crypto's CVEs have a known public exploit available.

Affected versions and CVEs

Browse every golang.org golang.org/x/crypto version named in a CVE, then pick one to see only the CVEs that affect it.

Version ranges

< 0.52.013 CVEs
< 0.45.02 CVEs
< 0.0.0-20170330155735-e4e2799dd7aa1 CVE
< 0.0.0-20190320223903-b7391e95e5761 CVE
< 0.0.0-20190424203555-c05e17bb3b2d1 CVE
< 0.0.0-20200124225646-8b5121be2f681 CVE
< 0.0.0-20200220183623-bac4c82f69751 CVE
< 0.0.0-20201216223049-8b5274cf687f1 CVE
< 0.0.0-20211202192323-5770296d904e1 CVE
< 0.0.0-20220314234659-1baeb1ce4c0b1 CVE

Common weakness types

The CWE weakness categories most often found in golang.org golang.org/x/crypto CVEs. Follow any weakness for its full explanation.

Disclosure activity by year

How many golang.org golang.org/x/crypto CVEs were published each year.

2017

2019

2020

2022

2023

2024

2025

Other golang.org products

Browse vulnerabilities for other products by golang.org.

golang.org/x/net31 CVEs golang.org/x/image8 CVEs golang.org/x/net/http24 CVEs golang.org/x/text3 CVEs golang.org/x/net/html2 CVEs golang.org/x/crypto/ssh/agent1 CVEs golang.org/x/oauth21 CVEs

Frequently asked questions

Common questions about golang.org golang.org/x/crypto vulnerabilities.

How many CVEs does golang.org golang.org/x/crypto have?: golang.org golang.org/x/crypto has 28 published CVE records since 2017.
How many golang.org golang.org/x/crypto CVEs are in CISA KEV?: None of golang.org golang.org/x/crypto's CVEs are currently listed in CISA's Known Exploited Vulnerabilities catalog.
Are there public exploits for golang.org golang.org/x/crypto vulnerabilities?: Yes — 4 of golang.org golang.org/x/crypto's CVEs have a known public exploit.
Which versions of golang.org golang.org/x/crypto are affected?: 33 distinct golang.org golang.org/x/crypto versions are named across its CVEs. Use the version filter above to see the CVEs affecting a specific version.
What are the most common weakness types in golang.org golang.org/x/crypto CVEs?: golang.org golang.org/x/crypto's CVEs most often map to these CWE weakness types: CWE-281 (Improper Preservation of Permissions), CWE-770 (Allocation of Resources Without Limits or Throttling), CWE-129 (Improper Validation of Array Index), CWE-295 (Improper Certificate Validation).
How many critical golang.org golang.org/x/crypto vulnerabilities are there?: golang.org golang.org/x/crypto has 8 critical and 13 high-severity CVEs.
What is the average severity of golang.org golang.org/x/crypto CVEs?: The average CVSS base score across golang.org golang.org/x/crypto's scored CVEs is 7.6.

References

Vulnerability data is sourced from the CVE Program; severity, KEV, and exploit signals are aggregated by RadicalNotion.AI.

Track golang.org golang.org/x/crypto vulnerabilities

Monitor new golang.org golang.org/x/crypto vulnerabilities as they are disclosed, with AI-written analysis and remediation guidance.

Start free See pricing