leader_worker_set vulnerabilities

CVEs whose affected-version data names the leader_worker_set package (go). Each record lists the affected and patched versions; check a specific version with the dependency checker or POST /api/sbom.

1 CVERSS

CVE-2026-39833Medium· 5.5⚖ disputed

5mo ago

golang.org/x/crypto/ssh/agent: golang.org/x/crypto/ssh/agent: Security bypass due to unenforced key confirmation (CVE-2026-39833)

A flaw was found in golang.org/x/crypto/ssh/agent. The NewKeyring() function, which creates an in-memory keyring, failed to enforce the ConfirmBeforeUse constraint on keys. This allowed keys configured to require user confirmation before u…

▾ SunlitRed Hat · Red Hat OpenShift Container Platform 4EPSS 0.47%via CSAF