golang.org/x/crypto/ssh/agent: golang.org/x/crypto/ssh/agent: Security bypass due to improper handling of key restrictions

A flaw was found in golang.org/x/crypto/ssh/agent. When a key was added to a remote agent, security restrictions, known as constraint extensions, were not properly processed during the request. This allowed these restrictions to be silently removed when keys were forwarded, leading to the...

CVE-2025-47913

SSH clients are vulnerable to a panic and early termination of the client process when receiving an SSH_AGENT_SUCCESS message while expecting a typed response. This issue is caused by a reachable assertion (CWE-617) in the golang.org/x/crypto/ssh/agent component. Affected products include IBM Sec...