golang.org/x/crypto golang.org/x/crypto/ssh/knownhosts
1 published vulnerability names this product.
As the CNAs write it in their CVE records (vendor and product); the versions are theirs.
| CVE | Vulnerable versions | Title | Severity | Published | EPSS | Exploitation |
|---|---|---|---|---|---|---|
| CVE-2026-42508 | < 0.52.0 | Invoking auth bypass via unenforced @revoked status in golang.org/x/crypto/ssh/knownhosts | CRITICAL 9.1 | 6.9 % |