Upgrading golang.org/x/crypto 0.51 to 0.52
Unknownv0.51.0 → v0.52.0Security13
SecurityInvoking bypass of certificate restrictions in golang.org/x/crypto/sshGHSA-45gg-vh54-h5m9 · CVE-2026-39828 ↗
UnknownUpgrade verdict
The only release in this range publishes no notes, so breaking changes can't be ruled out.
In plain terms
- Some releases in this range publish no notes, so DepDelta can't rule out breaking changes.
- Their commits are listed with this comparison.
Must act Top 3 of 13 that need code or config changes
What you must change
Security13
Invoking bypass of certificate restrictions in golang.org/x/crypto/ssh
Invoking key constraints not enforced in golang.org/x/crypto/ssh/agent
Invoking byte arithmetic causes underflow and panic in golang.org/x/crypto/ssh
Invoking memory leak when rejecting channels can lead to DoS in golang.org/x/crypto/ssh
Invoking auth bypass via unenforced @revoked status in golang.org/x/crypto/ssh/knownhosts
Invoking server panic during CheckHostKey/Authenticate in golang.org/x/crypto/ssh
Invoking bypass of FIDO/U2F security keys physical interaction in golang.org/x/crypto/ssh
Invoking pathological inputs can lead to client panic in golang.org/x/crypto/ssh/agent
Invoking agent constraints dropped when forwarding keys in golang.org/x/crypto/ssh/agent
Invoking infinite loop on large channel writes in golang.org/x/crypto/ssh
Invoking client can cause server deadlock on unexpected responses in golang.org/x/crypto/ssh
Invoking pathological RSA/DSA parameters may cause DoS in golang.org/x/crypto/ssh
Invoking VerifiedPublicKeyCallback permissions skip enforcement in golang.org/x/crypto/ssh