Vulnerability patch (golang.org/x/crypto/ssh)

[sam-caldwell]

Describe the bug
A publicly known security vulnerability exists for golang.org/x/[email protected] with CVSS 5.9 which could allow an attacker to bypass ssh authentication by capture-replay. This vulnerability is fixed in 0.17.0. The latest version is 0.18.0. The vulnerability has a published proof of concept.

To Reproduce
Steps to reproduce the behavior:

1. This defect can be identified using Snyk or any other code scanner.

Expected behavior
The vulnerability should not be detected by snyk

Screenshots
N/A

Environment that you use to compile (please complete the following information):
N/A

Additional context

[Code-Hex]

Thanks for creating this issue.
To be clear I didn't use this package for production. Used only in testing.

So my recognition is this is not critical. However I understand better to update this package :D