VYPR
← All advisories
Medium severity5.3NVD Advisory· Published May 22, 2026· Updated Sep 18, 2026

CVE-2026-39835

CVE-2026-39835

Description

SSH servers which use CertChecker as a public key callback without setting IsUserAuthority or IsHostAuthority could be caused to panic by a client presenting a certificate. CertChecker now returns an error instead of panicking when these callbacks are nil.

AI Insight

LLM-synthesized narrative grounded in this CVE's description and references.

Affected packages

Versions sourced from the GitHub Security Advisory.

PackageAffected versionsPatched versions
golang.org/x/cryptoGo
< 0.52.00.52.0

Affected products

2806

Patches

Vulnerability mechanics

References

62

News mentions

0

No linked articles in our index yet.