CVE-2024-45337

Applications and libraries misusing connection.serverAuthenticate via the ServerConfig.PublicKeyCallback field in golang.org/x/crypto are susceptible to an authorization bypass . The root cause is that the SSH protocol allows clients to inquire about public keys before proving control; a vulnerab...