x/vulndb: potential Go vuln in golang.org/x/crypto: CVE-2025-47913

[thatnealpatel]

CVE ID

CVE-2025-47913

GHSA ID

GHSA-hcg3-q754-cr77

Additional information

ssh/agent: return an error for unexpected message types

Previously, receiving an unexpected message type in response to a key
listing or a signing request could cause a panic due to a failed type
assertion.

This change adds a default case to the type switch in order to detect
and explicitly handle unknown or invalid message types, returning a
descriptive error instead of crashing.

This is CVE-2025-47913 and Go issue https://go.dev/issue/75178.

[gopherbot]

Change https://go.dev/cl/720400 mentions this issue: data/reports: add GO-2025-4116