Most recent entries from all https://vulnerability.circl.lu Contains only the most 10 recent entries. http://www.rssboard.org/rss-specification python-feedgen en Thu, 08 Oct 2026 23:50:53 +0000 GHSA-x527-x647-q7gg — golang.org/x/crypto: Invoking VerifiedPublicKeyCallback permissions skip enforcement https://vulnerability.circl.lu/vuln/ghsa-x527-x647-q7gg <p><strong>Affected:</strong> Go: golang.org/x/crypto</p> <p>Previously, CVE-2024-45337 fixed an authorization bypass for misused ssh server configurations; if any other type of callback is passed other than public key, then the source-address validation would be skipped.</p> <p><strong>Affected:</strong> Go: golang.org/x/crypto</p> <p>Previously, CVE-2024-45337 fixed an authorization bypass for misused ssh server configurations; if any other type of callback is passed other than public key, then the source-address validation would be skipped.</p> https://vulnerability.circl.lu/vuln/ghsa-x527-x647-q7gg