)]}'
{
  "commit": "abbc44d451a6f9236a2bbd26cbcd4d0fec473da3",
  "tree": "197ba22e8afed01f262b464fb18fe4c2cee5e508",
  "parents": [
    "e052873987615dc96fe67607a9a6adb76311344f"
  ],
  "author": {
    "name": "Neal Patel",
    "email": "nealpatel@google.com",
    "time": "Fri May 15 20:04:07 2026 +0000"
  },
  "committer": {
    "name": "Gopher Robot",
    "email": "gobot@golang.org",
    "time": "Thu May 21 17:03:25 2026 -0700"
  },
  "message": "ssh: fix incorrect operator order\n\nArithmetic is incorrectly applied to \u0027byte\u0027\ninstead of \u0027int\u0027 resulting in a possible\noverflow that allows for a panic.\n\nFixes CVE-2026-46597\nFixes golang/go#79561\n\nChange-Id: I83edabeeda676f0209d29d5e2554890bbd0eef8f\nReviewed-on: https://go-review.googlesource.com/c/crypto/+/781620\nReviewed-by: Roland Shoemaker \u003croland@golang.org\u003e\nAuto-Submit: Gopher Robot \u003cgobot@golang.org\u003e\nReviewed-by: Nicholas Husin \u003cnsh@golang.org\u003e\nReviewed-by: Nicholas Husin \u003chusin@google.com\u003e\nLUCI-TryBot-Result: golang-scoped@luci-project-accounts.iam.gserviceaccount.com \u003cgolang-scoped@luci-project-accounts.iam.gserviceaccount.com\u003e\n",
  "tree_diff": [
    {
      "type": "modify",
      "old_id": "ad2b37057831d553e2ed01b8f10996c076a265e1",
      "old_mode": 33188,
      "old_path": "ssh/cipher.go",
      "new_id": "48d019954599a815201485dc37d1d37bb2e67cdd",
      "new_mode": 33188,
      "new_path": "ssh/cipher.go"
    }
  ]
}