GO-2025-4116 Potential denial of service in golang.org/x/crypto/ssh/agent

🗓️ 13 Nov 2025 21:12:03Reported by GoogleType

osv🔗 osv.dev👁 11 Views

Potential denial of service in golang.org/x/crypto/ssh/agent; clients may panic when a typed response is expected after receiving a success.

Reporter	Title	Published	Views	Family All 2089
RedhatCVE	CVE-2025-47913	23 Nov 202521:31	–	redhatcve
RedHat Linux	Important: Red Hat Security Advisory: VolSync v0.14 security fixes and container updates	13 Jan 202616:52	–	redhat
RedHat Linux	Important: Red Hat Security Advisory: podman security update	14 Jan 202604:08	–	redhat
RedHat Linux	golang.org/x/crypto/ssh/agent: golang.org/x/crypto/ssh/agent: SSH client panic due to unexpected SSH_AGENT_SUCCESS	14 Jan 202604:08	–	redhat
RedHat Linux	Important: Red Hat Security Advisory: container-tools:rhel8 security update	19 Jan 202602:20	–	redhat
RedHat Linux	golang.org/x/crypto/ssh/agent: golang.org/x/crypto/ssh/agent: SSH client panic due to unexpected SSH_AGENT_SUCCESS	19 Jan 202602:20	–	redhat
RedHat Linux	Important: Red Hat Security Advisory: Red Hat OpenShift GitOps v1.18.3 security update	22 Jan 202615:47	–	redhat
RedHat Linux	Important: Red Hat Security Advisory: Red Hat OpenShift GitOps v1.17.4 security update	22 Jan 202615:52	–	redhat
RedHat Linux	Important: Red Hat Security Advisory: container-tools:rhel8 security update	27 Apr 202602:17	–	redhat
RedHat Linux	golang.org/x/crypto/ssh/agent: golang.org/x/crypto/ssh/agent: SSH client panic due to unexpected SSH_AGENT_SUCCESS	27 Apr 202602:17	–	redhat

Source	Link
go	www.go.dev/cl/700295
go	www.go.dev/issue/75178
github	www.github.com/advisories/GHSA-56w8-48fp-6mgv

21 May 2026 10:29Current

6.8Medium risk

Vulners AI Score6.8

CVSS 3.17.5

EPSS0.00623

SSVC