CVE-2026-39829 Invoking pathological RSA/DSA parameters may cause DoS in golang.org/x/crypto/ssh

[
  {
    "vendor": "golang.org/x/crypto",
    "product": "golang.org/x/crypto/ssh",
    "collectionURL": "https://pkg.go.dev",
    "packageName": "golang.org/x/crypto/ssh",
    "versions": [
      {
        "version": "0",
        "lessThan": "0.52.0",
        "status": "affected",
        "versionType": "semver"
      }
    ],
    "programRoutines": [
      {
        "name": "parseRSA"
      },
      {
        "name": "checkDSAParams"
      },
      {
        "name": "parseDSA"
      },
      {
        "name": "Dial"
      },
      {
        "name": "NewClientConn"
      },
      {
        "name": "NewServerConn"
      },
      {
        "name": "NewSignerFromKey"
      },
      {
        "name": "ParseAuthorizedKey"
      },
      {
        "name": "ParseKnownHosts"
      },
      {
        "name": "ParsePrivateKey"
      },
      {
        "name": "ParsePrivateKeyWithPassphrase"
      },
      {
        "name": "ParsePublicKey"
      },
      {
        "name": "ParseRawPrivateKey"
      },
      {
        "name": "ParseRawPrivateKeyWithPassphrase"
      }
    ],
    "defaultStatus": "unaffected"
  }
]