What are the most common weakness types in golang.org/x/crypto golang.org/x/crypto/ssh/agent CVEs?

golang.org/x/crypto golang.org/x/crypto/ssh/agent's CVEs most often map to these CWE weakness types: CWE-125 (Out-of-bounds Read), CWE-129 (Improper Validation of Array Index), CWE-281 (Improper Preservation of Permissions).

What is the average severity of golang.org/x/crypto golang.org/x/crypto/ssh/agent CVEs?

The average CVSS base score across golang.org/x/crypto golang.org/x/crypto/ssh/agent's scored CVEs is 7.3.

golang.org/x/crypto golang.org/x/crypto/ssh/agent Vulnerabilities: CVEs, CISA KEV & Security Advisories

Name: golang.org/x/crypto golang.org/x/crypto/ssh/agent vulnerability dataset (CVEs)
Creator: RadicalNotion.AI
License: https://creativecommons.org/licenses/by-nc/4.0/

RadicalNotion.AI

golang.org/x/crypto golang.org/x/crypto/ssh/agent Vulnerabilities: CVEs, CISA KEV & Security Advisories

Overview

golang.org/x/crypto golang.org/x/crypto/ssh/agent has 5 published CVE records since 2025, of which 0 are in CISA's Known Exploited Vulnerabilities catalog and 0 have a known public exploit. The average CVSS base score across scored CVEs is 7.3.

This page aggregates every publicly disclosed vulnerability (CVE) affecting golang.org/x/crypto golang.org/x/crypto/ssh/agent, with a severity breakdown, the affected and patched versions, the most common weakness types, and the full CVE list.

Severity and exploitation

How the CVSS severity of golang.org/x/crypto golang.org/x/crypto/ssh/agent's CVEs breaks down, plus how many are exploited in the wild or have public exploit code.

Critical2

High1

Medium2

Low0

In CISA’s Known Exploited Vulnerabilities catalog

None of golang.org/x/crypto golang.org/x/crypto/ssh/agent's CVEs are currently listed in CISA's KEV catalog.

Public exploits

No golang.org/x/crypto golang.org/x/crypto/ssh/agent CVEs currently have a tracked public exploit.

Affected versions and CVEs

Browse every golang.org/x/crypto golang.org/x/crypto/ssh/agent version named in a CVE, then pick one to see only the CVEs that affect it.

Version ranges

< 0.52.03 CVEs
< 0.43.01 CVE
< 0.45.01 CVE

Fixed in

0.52.03 CVEs
0.43.01 CVE
0.45.01 CVE

Find a version

5 CVEs

Sort

Invoking pathological inputs can lead to client panic in golang.org/x/crypto/ssh/agent
CVE-2026-46598
Patch
CWE-129
Medium · CVSS 5.3
EPSS 0.4% (34th pct)2026-05-22
Invoking agent constraints dropped when forwarding keys in golang.org/x/crypto/ssh/agent
CVE-2026-39832
Patch
CWE-281
Critical · CVSS 9.1
EPSS 0.6% (46th pct)2026-05-22
Invoking key constraints not enforced in golang.org/x/crypto/ssh/agent
CVE-2026-39833
Patch
Critical · CVSS 9.1
EPSS 0.4% (34th pct)2026-05-22
Malformed constraint may cause denial of service in golang.org/x/crypto/ssh/agent
CVE-2025-47914
Patch
CWE-125
Medium · CVSS 5.3
EPSS 0.5% (41th pct)2025-11-19
Potential denial of service in golang.org/x/crypto/ssh/agent
CVE-2025-47913
Patch
High · CVSS 7.5
EPSS 0.6% (47th pct)2025-11-13

Common weakness types

The CWE weakness categories most often found in golang.org/x/crypto golang.org/x/crypto/ssh/agent CVEs. Follow any weakness for its full explanation.

Disclosure activity by year

How many golang.org/x/crypto golang.org/x/crypto/ssh/agent CVEs were published each year.

2025

2026

Other golang.org/x/crypto products

Browse vulnerabilities for other products by golang.org/x/crypto.

golang.org/x/crypto/ssh13 CVEs golang.org/x/crypto/acme/autocert1 CVEs golang.org/x/crypto/ssh/knownhosts1 CVEs

All golang.org/x/crypto vulnerabilities

Frequently asked questions

Common questions about golang.org/x/crypto golang.org/x/crypto/ssh/agent vulnerabilities.

How many CVEs does golang.org/x/crypto golang.org/x/crypto/ssh/agent have?: golang.org/x/crypto golang.org/x/crypto/ssh/agent has 5 published CVE records since 2025.
How many golang.org/x/crypto golang.org/x/crypto/ssh/agent CVEs are in CISA KEV?: None of golang.org/x/crypto golang.org/x/crypto/ssh/agent's CVEs are currently listed in CISA's Known Exploited Vulnerabilities catalog.
Are there public exploits for golang.org/x/crypto golang.org/x/crypto/ssh/agent vulnerabilities?: No golang.org/x/crypto golang.org/x/crypto/ssh/agent CVEs currently have a tracked public exploit in this dataset.
Which versions of golang.org/x/crypto golang.org/x/crypto/ssh/agent are affected?: 6 distinct golang.org/x/crypto golang.org/x/crypto/ssh/agent versions are named across its CVEs. Use the version filter above to see the CVEs affecting a specific version.
What are the most common weakness types in golang.org/x/crypto golang.org/x/crypto/ssh/agent CVEs?: golang.org/x/crypto golang.org/x/crypto/ssh/agent's CVEs most often map to these CWE weakness types: CWE-125 (Out-of-bounds Read), CWE-129 (Improper Validation of Array Index), CWE-281 (Improper Preservation of Permissions).
How many critical golang.org/x/crypto golang.org/x/crypto/ssh/agent vulnerabilities are there?: golang.org/x/crypto golang.org/x/crypto/ssh/agent has 2 critical and 1 high-severity CVEs.
What is the average severity of golang.org/x/crypto golang.org/x/crypto/ssh/agent CVEs?: The average CVSS base score across golang.org/x/crypto golang.org/x/crypto/ssh/agent's scored CVEs is 7.3.

References

Vulnerability data is sourced from the CVE Program; severity, KEV, and exploit signals are aggregated by RadicalNotion.AI.

Track golang.org/x/crypto golang.org/x/crypto/ssh/agent vulnerabilities

Monitor new golang.org/x/crypto golang.org/x/crypto/ssh/agent vulnerabilities as they are disclosed, with AI-written analysis and remediation guidance.

Start free See pricing