golang.org/x/crypto/ssh/agent has a potential denial of service

🗓️ 14 Nov 2025 00:30:27Reported by GitHub Advisory DatabaseType

Denial of service risk in golang.org/x/crypto/ssh/agent where an unexpected SSH_AGENT_SUCCESS response can cause client panic.

Reporter	Title	Published	Views	Family All 903
ibm	Security Bulletin: Multiple vulnerabilities in IBM watsonx Orchestrate Developer Edition	30 Jan 202609:11	–	ibm
ibm	Security Bulletin: Due to use of Golang Go, multiple vulnerabilities affect IBM Cloud Pak System	4 Jul 202600:35	–	ibm
ibm	Security Bulletin: Due to use of IBM Storage Scale, IBM Cloud Pak System is affected by multiple vulnerabilities	24 Jun 202616:00	–	ibm
ibm	Security Bulletin: Multiple vulnerabilities in IBM Planning Analytics	11 Feb 202620:17	–	ibm
ibm	Security Bulletin: Multiple vulnerabilities in IBM MQ Operator and Queue manager container images	10 Dec 202516:39	–	ibm
ibm	Security Bulletin: IBM Maximo Application Suite - Visual Inspection component uses golang.org/x/crypto which is vulnerable to CVE-2025-47913	19 Jan 202605:37	–	ibm
ibm	Security Bulletin: Vulnerability in golang.org/x/crypto bundled with IBM Fusion, IBM Fusion HCI and IBM Fusion Content-Aware Storage	8 Apr 202608:04	–	ibm
ibm	Security Bulletin: IBM Watson Speech Services Cartridge is vulnerable to an early termination condition in golang.org/x/crypto [CVE-2025-47913]	14 Apr 202614:34	–	ibm
ibm	Security Bulletin: Vulnerabilities exists in IBM Netezza Software	19 Jun 202617:23	–	ibm
ibm	Security Bulletin: Multiple security vulnerabilities in Go affects IBM Robotic Process Automation for Cloud Pak	23 Mar 202613:35	–	ibm

Vulners

Node

ssh agentRange<0.43.0go

Source	Link
nvd	www.nvd.nist.gov/vuln/detail/CVE-2025-47913
go	www.go.dev/cl/700295
go	www.go.dev/issue/75178
pkg	www.pkg.go.dev/vuln/GO-2025-4116
github	www.github.com/advisories/GHSA-56w8-48fp-6mgv

19 Jun 2026 14:34Current

6.7Medium risk

Vulners AI Score6.7

CVSS 3.17.5

EPSS0.00632

SSVC