Debian/golang-github-azure-go-ntlmssp: high 7.5
go-ntlmssp is a Go package that provides NTLM/Negotiate authentication over HTTP. Prior to version 0.1.1, a malicious NTLM challenge message can causes an slice out of bounds panic, which can crash an
Action: No fix published. Pin and monitor.
Affected
| introduced | fixed | last affected |
|---|---|---|
| 0 | - | - |
Fixed versions
No fixed version in the source.
Sources
- osv: DEBIAN-CVE-2026-32952#Debian:14/golang-github-azure-go-ntlmssp
- https://security-tracker.debian.org/tracker/CVE-2026-32952
published · modified · JSON