SSH servers which use CertChecker as a public key callback without setting IsUserAuthority or IsHostAuthority could be caused to panic by a client presenting a certificate. CertChecker now returns an error instead of panicking when these callbacks are nil.
References
Configurations
History
21 Jul 2026, 12:18
| Type | Values Removed | Values Added |
|---|---|---|
| References |
|
17 Jul 2026, 13:18
| Type | Values Removed | Values Added |
|---|---|---|
| References |
|
16 Jul 2026, 12:17
| Type | Values Removed | Values Added |
|---|---|---|
| References |
|
13 Jul 2026, 13:16
| Type | Values Removed | Values Added |
|---|---|---|
| References |
|
10 Jul 2026, 12:16
| Type | Values Removed | Values Added |
|---|---|---|
| References |
|
09 Jul 2026, 13:17
| Type | Values Removed | Values Added |
|---|---|---|
| References |
|
08 Jul 2026, 13:16
| Type | Values Removed | Values Added |
|---|---|---|
| References |
|
01 Jul 2026, 13:17
| Type | Values Removed | Values Added |
|---|---|---|
| References |
|
30 Jun 2026, 03:19
| Type | Values Removed | Values Added |
|---|---|---|
| CWE | CWE-476 | |
| References |
|
28 May 2026, 14:56
| Type | Values Removed | Values Added |
|---|---|---|
| First Time |
Golang crypto
Golang |
|
| CWE | CWE-295 | |
| CPE | cpe:2.3:a:golang:crypto:*:*:*:*:*:go:*:* | |
| References | () https://go.dev/cl/781660 - Issue Tracking | |
| References | () https://go.dev/issue/79563 - Issue Tracking | |
| References | () https://groups.google.com/g/golang-announce/c/a082jnz-LvI - Mailing List | |
| References | () https://pkg.go.dev/vuln/GO-2026-5015 - Vendor Advisory |
22 May 2026, 18:16
| Type | Values Removed | Values Added |
|---|---|---|
| CVSS |
v2 : v3 : |
v2 : unknown
v3 : 5.3 |
22 May 2026, 04:16
| Type | Values Removed | Values Added |
|---|---|---|
| New CVE |
Information
Published : 2026-05-22 04:16
Updated : 2026-07-21 12:18
NVD link : CVE-2026-39835
Mitre link : CVE-2026-39835
CVE.ORG link : CVE-2026-39835
JSON object : View
Products Affected
golang
- crypto
