)]}'
{
  "commit": "890731877d85f71cfdc9554e7a27fec4684fc4c4",
  "tree": "9443a33f5895c5293c9e3b228671e2d6a035247b",
  "parents": [
    "ffd87b4878fa98ca2908ec534e1a410bf095a35e"
  ],
  "author": {
    "name": "Nicola Murino",
    "email": "nicola.murino@gmail.com",
    "time": "Sun Feb 01 13:10:56 2026 +0100"
  },
  "committer": {
    "name": "Neal Patel",
    "email": "nealpatel@google.com",
    "time": "Thu May 21 17:03:13 2026 -0700"
  },
  "message": "ssh: reject RSA keys with excessively large moduli\n\nPreviously, the RSA key parser accepted keys with arbitrary modulus\nsizes. Processing keys with extremely large moduli (e.g., \u003e 8192 bits)\ncan consume excessive CPU resources during verification, potentially\nleading to a Denial of Service (DoS).\n\nThis change introduces a limit of 8192 bits for the RSA modulus in\nparseRSA, rejecting keys that exceed this size in line with the limit\nenforced by crypto/tls.\n\nThis issue was found during a security audit by NCC Group Cryptography\nServices, sponsored by Teleport.\n\nFixes golang/go#79565\nFixes CVE-2026-39829\n\nChange-Id: Ibdddad1859a4d9db5c9f052d06c82f29bfc2e5e5\nReviewed-on: https://go-review.googlesource.com/c/crypto/+/781641\nReviewed-by: Neal Patel \u003cnealpatel@google.com\u003e\nLUCI-TryBot-Result: golang-scoped@luci-project-accounts.iam.gserviceaccount.com \u003cgolang-scoped@luci-project-accounts.iam.gserviceaccount.com\u003e\nReviewed-by: Roland Shoemaker \u003croland@golang.org\u003e\n",
  "tree_diff": [
    {
      "type": "modify",
      "old_id": "47a07539d90ce13ab3813d06bb85613ec15e2015",
      "old_mode": 33188,
      "old_path": "ssh/keys.go",
      "new_id": "47b2c45c0509d1251c22e189f9bd7d162c0cbe0f",
      "new_mode": 33188,
      "new_path": "ssh/keys.go"
    },
    {
      "type": "modify",
      "old_id": "e1412bb0aa3cbfcbdf2346c9661d0f6061931179",
      "old_mode": 33188,
      "old_path": "ssh/keys_test.go",
      "new_id": "704ad432520d890cef7c394febe269c34ffc035c",
      "new_mode": 33188,
      "new_path": "ssh/keys_test.go"
    }
  ]
}