<?xml version="1.0" encoding="UTF-8"?>
<VrdaData refvuldefversion="1.2" xmlns:xsi="http://www.w3.org/2001/XMLSchema-instance" xmlns="http://vrda.jpcert.or.jp" xsi:schemaLocation="http://vrda.jpcert.or.jp/feed/xsd/vrda_data.xsd">
  <VrdaDataProvider>
    <Name>JVN iPedia</Name>
    <URL>http://jvndb.jvn.jp</URL>
  </VrdaDataProvider>
  <VrdaDataSourceType>Advisory</VrdaDataSourceType>
  <Vulinfo revisionno="1" lang="ja" invalidated="false">
    <VulinfoID>JVNDB-2026-017351</VulinfoID>
    <VulinfoData>
      <Title>The Go Project&#12398;crypto&#12395;&#12362;&#12369;&#12427;&#37197;&#21015;&#12452;&#12531;&#12487;&#12483;&#12463;&#12473;&#12398;&#26908;&#35388;&#12395;&#38306;&#12377;&#12427;&#33030;&#24369;&#24615;</Title>
      <VulinfoDescription>
        <Overview>&#29305;&#23450;&#12398;&#32048;&#24037;&#12373;&#12428;&#12383;&#20837;&#21147;&#12395;&#12424;&#12426;&#12289;&#19981;&#27491;&#12394;&#12527;&#12452;&#12516;&#12540;&#12496;&#12452;&#12488;&#12364;&#12461;&#12515;&#12473;&#12488;&#12373;&#12428;&#12390; 'ed25519.PrivateKey' &#12364;&#20316;&#25104;&#12373;&#12428;&#12289;&#12381;&#12398;&#20351;&#29992;&#26178;&#12395;&#12497;&#12491;&#12483;&#12463;&#12364;&#30330;&#29983;&#12375;&#12414;&#12375;&#12383;&#12290;</Overview>
      </VulinfoDescription>
      <Affected>
        <AffectedItem affectedstatus="vulnerable">
          <Lapt>cpe:/a:golang:crypto</Lapt>
        </AffectedItem>
      </Affected>
      <FactAnalysis>
      </FactAnalysis>
      <Related>
        <RelatedItem relationtype="self" origin="jvnipedia">
          <URL>https://jvndb.jvn.jp/ja/contents/2026/JVNDB-2026-017351.html</URL>
        </RelatedItem>
        <RelatedItem relationtype="alternate" origin="other">
          <Name>Common Vulnerabilities and Exposures (CVE)</Name>
          <VulinfoID>CVE-2026-46598</VulinfoID>
          <URL>https://www.cve.org/CVERecord?id=CVE-2026-46598</URL>
        </RelatedItem>
        <RelatedItem relationtype="alternate" origin="other">
          <Name>National Vulnerability Database (NVD)</Name>
          <VulinfoID>CVE-2026-46598</VulinfoID>
          <URL>https://nvd.nist.gov/vuln/detail/CVE-2026-46598</URL>
        </RelatedItem>
        <RelatedItem relationtype="reference" origin="other">
          <Name>Go</Name>
          <VulinfoID>GO-2026-5033 - Go Packages</VulinfoID>
          <URL>https://pkg.go.dev/vuln/GO-2026-5033</URL>
        </RelatedItem>
        <RelatedItem relationtype="reference" origin="other">
          <Name>JVNDB</Name>
          <VulinfoID>CWE-129</VulinfoID>
          <Title>&#37197;&#21015;&#12452;&#12531;&#12487;&#12483;&#12463;&#12473;&#12398;&#19981;&#36969;&#20999;&#12394;&#26908;&#35388;</Title>
          <URL>https://cwe.mitre.org/data/definitions/129.html</URL>
        </RelatedItem>
        <RelatedItem relationtype="reference" origin="other">
          <Name>&#38306;&#36899;&#25991;&#26360;</Name>
          <VulinfoID>[security] Vulnerabilities in golang.org/x/crypto</VulinfoID>
          <URL>https://groups.google.com/g/golang-announce/c/a082jnz-LvI</URL>
        </RelatedItem>
        <RelatedItem relationtype="reference" origin="other">
          <Name>&#38306;&#36899;&#25991;&#26360;</Name>
          <VulinfoID>ssh/agent: prevent panic on pathological ed25519 inputs (781360)  Gerrit Code Review</VulinfoID>
          <URL>https://go.dev/cl/781360</URL>
        </RelatedItem>
        <RelatedItem relationtype="reference" origin="other">
          <Name>&#38306;&#36899;&#25991;&#26360;</Name>
          <VulinfoID>x/crypto/ssh/agent: pathological inputs can lead to client panic  Issue #79596  golang/go</VulinfoID>
          <URL>https://go.dev/issue/79596</URL>
        </RelatedItem>
      </Related>
      <DateFirstPublished>2026-06-03T15:35:10+09:00</DateFirstPublished>
      <DateLastUpdated>2026-06-03T15:35:10+09:00</DateLastUpdated>
    </VulinfoData>
  </Vulinfo>
</VrdaData>
