Staging Environment: Content and features may be unstable or change without notice.
Search for packages
Package details: pkg:deb/debian/golang-go.crypto@1:0.0~git20170407.0.55a552f%2BREALLY.0.0~git20161012.0.5f31782-1?distro=trixie
purl pkg:deb/debian/golang-go.crypto@1:0.0~git20170407.0.55a552f%2BREALLY.0.0~git20161012.0.5f31782-1?distro=trixie
Vulnerabilities affecting this package (0)
Vulnerability Summary Fixed by
This package is not known to be affected by vulnerabilities.
Vulnerabilities fixed by this package (1)
Vulnerability Summary Aliases
VCID-t5dk-qg2g-3qhp golang.org/x/crypto/ssh Man-in-the-Middle attack The Go SSH library (golang.org/x/crypto/ssh) by default does not verify host keys, facilitating man-in-the-middle attacks if ClientConfig.HostKeyCallback is not set. Default behavior changed in commit e4e2799 to require explicitly registering a hostkey verification mechanism. CVE-2017-3204
GHSA-xhjq-w7xm-p8qj

Date Actor Action Vulnerability Source VulnerableCode Version
2026-04-16T12:37:45.390367+00:00 Debian Importer Fixing VCID-t5dk-qg2g-3qhp https://security-tracker.debian.org/tracker/data/json 38.4.0
2026-04-13T08:39:10.091922+00:00 Debian Importer Fixing VCID-t5dk-qg2g-3qhp https://security-tracker.debian.org/tracker/data/json 38.3.0
2026-04-03T07:25:45.812945+00:00 Debian Importer Fixing VCID-t5dk-qg2g-3qhp https://security-tracker.debian.org/tracker/data/json 38.1.0