{"id":"GO-2026-5543","revision":"27dd424973f4433ab86516942b2bafe7","records":[{"revision":"27dd424973f4433ab86516942b2bafe7","observedAt":"2026-10-24T13:19:41.952+00:00","statement":{"source":"osv","id":"GO-2026-5543","aliases":["CVE-2026-32952","GHSA-pjcq-xvwq-hhpj"],"title":"Go-ntlmssp NTLM challenges can panic on malformed payloads in github.com/Azure/go-ntlmssp","description":"Go-ntlmssp NTLM challenges can panic on malformed payloads in github.com/Azure/go-ntlmssp","state":0,"publishedAt":"2026-07-24T18:35:55+00:00","modifiedAt":"2026-08-18T16:27:01.8493445+00:00","affected":[{"ecosystem":"Go","name":"github.com/Azure/go-ntlmssp","ranges":[{"type":"SEMVER","events":[{"kind":"introduced","version":"0"},{"kind":"fixed","version":"0.1.1"}]}],"versions":[],"rawVersionEvidence":null}],"metrics":[],"references":["https://github.com/Azure/go-ntlmssp/security/advisories/GHSA-pjcq-xvwq-hhpj","https://github.com/Azure/go-ntlmssp/commit/bd8579c18d41bf5d91a5f74b1117c958f635b866","https://github.com/Azure/go-ntlmssp/releases/tag/v0.1.1"],"sourceUrl":"https://osv.dev/vulnerability/GO-2026-5543","license":"OSV · upstream source license applies","key":"osv:GO-2026-5543","identifiers":["GO-2026-5543","CVE-2026-32952","GHSA-pjcq-xvwq-hhpj"]},"retained":false,"historicalAffected":[]}],"coverage":[]}