Go/github.com/openpubkey/opkssh CVE-2025-4658: critical 9.8, EPSS 0.34%

OPKSSH Vulnerable to Authentication Bypass

Action: Upgrade github.com/openpubkey/opkssh to 0.5.0 or later.

go get github.com/openpubkey/opkssh@v0.5.0

Affected

Fixed versions

Sources

• osv: GHSA-56wx-66px-9j66
• nvd: CVE-2025-4658
• https://github.com/openpubkey/opkssh/security/advisories/GHSA-56wx-66px-9j66
• https://github.com/openpubkey/opkssh

CVE-2025-4658 · published 2025-05-13T21:34:58Z · modified 2025-05-15T20:41:49.515714Z · JSON