https://vulnerability.circl.lu/rss/recent/all/10 Most recent entries from all 2026-10-03T08:17:30.152178+00:00 Vulnerability-Lookup info@circl.lu python-feedgen Contains only the most 10 recent entries. https://vulnerability.circl.lu/vuln/cve-2025-58181 CVE-2025-58181 — Unbounded memory consumption in golang.org/x/crypto/ssh 2026-10-03T08:17:30.913706+00:00

Affected: golang.org/x/crypto/ssh

SSH servers parsing GSSAPI authentication requests do not validate the number of mechanisms specified in the request, allowing an attacker to cause unbounded memory consumption.

 https://vulnerability.circl.lu/vuln/usn-7956-1 USN-7956-1 — google-guest-agent vulnerability 2026-10-03T08:17:30.913822+00:00

Affected: Ubuntu:Pro:16.04:LTS: google-guest-agent, Ubuntu:Pro:18.04:LTS: google-guest-agent, Ubuntu:Pro:20.04:LTS: google-guest-agent, Ubuntu:22.04:LTS: google-guest-agent, Ubuntu:24.04:LTS: google-guest-agent, Ubuntu:25.10: google-guest-agent

Jakub Ciolek discovered that the Go Cryptography module included in Google Guest Agent did not validate GSSAPI authentication requests during SSH operations. An attacker could possibly use this issue to cause a denial of service.