SecOps #1164: [Sécurité] Dépendance vulnérable : golang.org/x/crypto@v0.50.0 (CVE-2026-42508) - Business Manager - Redmine

Actions

Copy link

SecOps #1164

open

[Sécurité] Dépendance vulnérable : golang.org/x/crypto@v0.50.0 (CVE-2026-42508)

SecOps #1164: [Sécurité] Dépendance vulnérable : golang.org/x/crypto@v0.50.0 (CVE-2026-42508)

Added by Client Dashboard about 1 month ago. Updated 30 days ago.

Status:

Submitted

Priority:

Normal

Assignee:

Start date:

06/23/2026

Due date:

% Done:

Estimated time:

spec_ref:

build_status:

build_number:

ci_run_url:

scan_status:

scan_report_url:

deploy_status:

preprod_url:

deployed_at:

branch:

pr_url:

security_key:

golang.org/x/crypto@v0.50.0_CVE-2026-42508

severity:

high

paused:

Description

**Sévérité** : HIGH
**Source** : Trivy
`vuln-high`
**Paquet** : golang.org/x/crypto@v0.50.0
**Version corrigée** : 0.52.0
**Identifiant** : CVE-2026-42508

golang.org/x/crypto/ssh/knownhosts: golang: golang.org/x/crypto/ssh/knownhosts: Revocation bypass via unchecked SignatureKey

### Lien CVE
https://avd.aquasec.com/nvd/cve-2026-42508

### Recommandations
Mettre à jour golang.org/x/crypto vers 0.52.0.