tocsin

CVE-2026-56855

1 advisory.

Go/golang.org/x/crypto CVE-2026-56855: unknown, EPSS 0.50%

Prevent DoS on deadlocked established channel in golang.org/x/crypto/ssh

Action: Upgrade golang.org/x/crypto to 0.56.0 or later.

go get golang.org/x/crypto@v0.56.0

Affected

introducedfixedlast affected
00.56.0-

Fixed versions

0.56.0

Sources

CVE-2026-56855 · published · modified · JSON