Go/golang.org/x/crypto CVE-2025-22869: high 7.5, EPSS 0.94%

Potential denial of service in golang.org/x/crypto

Action: Upgrade golang.org/x/crypto to 0.35.0 or later.

go get golang.org/x/crypto@v0.35.0

Affected

Fixed versions

Sources

• osv: GO-2025-3487
• nvd: CVE-2025-22869
• https://go.dev/cl/652135
• https://go.dev/issue/71931

CVE-2025-22869 · published 2025-02-26T02:51:51Z · modified 2026-02-05T01:28:49.657684Z · JSON