Vulnerability Report: GO-2026-5018

CVE-2026-39829
Affects: golang.org/x/crypto
Published: May 22, 2026

The RSA and DSA public key parsers did not enforce size limits on key parameters. A crafted public key with an excessively large modulus or DSA parameter could cause several minutes of CPU consumption during signature verification. This could be triggered by unauthenticated clients during public key authentication. RSA moduli are now limited to 8192 bits, and DSA parameters are validated per FIPS 186-2.

Affected Packages

Path

Go Versions

Symbols
golang.org/x/crypto/ssh

before v0.52.0
11 affected symbols

Aliases

CVE-2026-39829

References

https://go.dev/issue/79565
https://groups.google.com/g/golang-announce/c/a082jnz-LvI
https://go.dev/cl/781641
https://go.dev/cl/781661
https://vuln.go.dev/ID/GO-2026-5018.json

Credits

NCC Group Cryptography Services, sponsored by Teleport

Feedback

See anything missing or incorrect? Suggest an edit to this report.