Skip to main content

CVE-2025-58181

CVE Details

Visit the official vulnerability details page for CVE-2025-58181 to learn more.

Initial Publication

11/19/2025

Last Update

12/11/2025

Third Party Dependency

golang.org/x/crypto

NIST CVE Summary

SSH servers parsing GSSAPI authentication requests do not validate the number of mechanisms specified in the request, allowing an attacker to cause unbounded memory consumption.

CVE Severity

5.3

Our Official Summary

Investigation is ongoing to determine how this vulnerability affects our products.

Status

Analyzed

Affected Products & Versions

VersionPaletteAIPaletteAI VerteX
0.7.1⚠️ Impacted⚠️ Impacted
0.6.6⚠️ Impacted⚠️ Impacted
0.5.11⚠️ Impacted⚠️ Impacted

Revision History

No revisions available.