go-ntlmssp vulnerabilities

1 known vulnerability in go-ntlmssp from Azure. 1 is rated high or critical. Each entry lists the affected versions and the release that fixes it, where the vendor has published one.

Latest first

• 7.5 High severity

  go-ntlmssp: Integer Overflow or Wraparound

  CVE-2026-32952Apr 24, 2026AzureEPSS 1.03%

  go-ntlmssp is a Go package that provides NTLM/Negotiate authentication over HTTP. Prior to version 0.1.1, a malicious NTLM challenge message can causes an slice out of bounds panic, which can crash any Go process using `ntlmssp.Negotiator` as an HTTP transport