Skip to content

[Aikido] Fix security issue in x/crypto via minor version upgrade from 0.53.0 to 0.55.0 - #63

Merged
chenxin0723 merged 1 commit into
masterfrom
fix/aikido-security-MAINT-1569-update-packages-100772368-skas
Sep 1, 2026
Merged

[Aikido] Fix security issue in x/crypto via minor version upgrade from 0.53.0 to 0.55.0#63
chenxin0723 merged 1 commit into
masterfrom
fix/aikido-security-MAINT-1569-update-packages-100772368-skas

Conversation

@aikido-autofix

Copy link
Copy Markdown
Contributor

Upgrade golang.org/x/crypto to enforce source-address restrictions across all authentication callbacks, fixing permission bypass vulnerability.

✅ 1 CVE resolved by this upgrade

This PR will resolve the following CVEs:

Issue Severity           Description
CVE-2026-56854
HIGH
[golang.org/x/crypto] Source-address restrictions in authentication callbacks were not enforced for password, keyboard-interactive, and other non-public-key authentication methods, allowing attackers to bypass IP-based access controls. The vulnerability has been fixed to validate source-address permissions across all authentication callback types.
🔗 Related Tasks

@chenxin0723
chenxin0723 merged commit 46c9fc3 into master Sep 1, 2026
2 checks passed
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

None yet

Projects

None yet

Development

Successfully merging this pull request may close these issues.

1 participant