Skip to content
OpenAdvisories

Package · Go

github.com/Azure/go-ntlmssp

1 known vulnerabilities.

All Critical High Medium Low Exploited only Public exploit

1 result · Feed

  • Medium 5.3
    CVE-2026-32952

    go-ntlmssp NTLM challenges can panic on malformed payloads

    go-ntlmssp is a Go package that provides NTLM/Negotiate authentication over HTTP. Prior to version 0.1.1, a malicious NTLM challenge message can causes an slice out of bounds panic, which can crash any Go process using `ntlmssp.Negotiator` as an HTTP transpor…

    Azure go-ntlmssp zot flux-source-controller Debian Ubuntu Alpine Wolfi Go