[{"_1":2,"_164":-5,"_165":-5},"loaderData",{"_3":4,"_20":21,"_73":74,"_94":95},"root",{"_5":-5,"_6":-7,"_7":-5,"_8":9,"_10":-5,"_11":12,"_13":-7,"_14":-5,"_15":-5,"_16":-5,"_17":-5,"_18":12,"_19":-7},"user","timezone","organizations","isWebsiteIndexable",true,"ddsFlags","enableDevTools",false,"clientIP","featureFlagsContext","pusherAppKey","pusherAppCluster","notifications","enableRootLoaderRevalidation","incidentStatus","routes/_layout",{"_22":-7,"_23":-7,"_24":-5,"_25":12,"_26":12,"_27":12,"_28":12,"_29":12,"_30":9,"_31":-5,"_32":12,"_33":34,"_37":38,"_46":47,"_51":52,"_61":-5,"_62":-5,"_63":12,"_64":65,"_72":9},"activePathname","orgname","userRole","isExceededLimitModalDismissed","isPaymentRequired","hasAnalyzedImages","hasEverAnalyzedImages","hasImageAnalysisEnabled","hasViewedOnboardingStepper","maintenanceStatus","isInOnboarding","featureFlags",{"_35":12,"_36":12},"isInternalGuidesFlagEnabled","supportPortalEnabled","plan",{"_39":-5,"_40":-5,"_41":-5,"_42":-5,"_43":-5,"_44":12,"_45":-5},"displayName","isFree","isLegacy","tier","billingCycle","hasPendingBillingChanges","renewalDate","permissions",{"_48":12,"_49":12,"_50":12},"canReadBilling","canUpdateBilling","canManageRepos","userConfig",{"_53":-5,"_54":9,"_55":9,"_56":57,"_58":12,"_17":59},"howToGuidesProgress","hasViewedHowToGuides","hasViewedGuidedSetupTour","readWhatsNewFeatures",[],"hasDismissedHowToGuidesCompletionAlert",{"_60":12},"showNotificationPopups","guideIdToOpen","guidedSetup","hasOrgRecentlyBeenOnboarded","entitlements",{"_66":-5,"_67":-5,"_68":-5,"_69":-5,"_70":-5,"_71":12},"reposLimit","standardEnabledRepos","reposLeftOver","hasUnlimitedRepos","hasExceededRepoLimits","isDhiEnabled","hasOffloadProductAccess","routes/_layout.vulnerabilities.id.$id",{"_75":12,"_76":-5,"_77":12,"_78":79,"_80":81,"_82":83,"_93":-5},"isAuthenticated","orgName","isOverLimits","sourceName","github","descriptionHtml","\n \n

A malicious NTLM challenge message can causes an slice out of bounds panic, which can crash any Go process using ntlmssp.Negotiator as an HTTP transport.

\n\n

\n ","cwes",[84],{"_78":79,"_82":85},[86],{"_87":88,"_89":90,"_91":92},"cweId","CWE-190","url","https://cwe.mitre.org/data/definitions/190.html","description","Integer Overflow or Wraparound","epss","routes/_layout.vulnerabilities.id.$id.(org).($orgname)._index",{"_96":-5,"_97":98,"_162":163},"highlightedSource","remainingSources",[99],{"_78":100,"_101":102,"_103":104,"_105":106,"_107":106,"_108":109,"_110":111,"_112":113,"_114":115,"_116":117,"_129":130,"_131":132,"_82":133,"_135":136,"_152":153,"_155":156,"_157":158,"_159":160},"GitHub","sourceUrl","https://github.com/advisories/GHSA-pjcq-xvwq-hhpj","sourceId","GHSA-pjcq-xvwq-hhpj","createdAt","2026-04-23T21:21:58.000Z","updatedAt","cvssScore",5.3,"cvssVector","CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L","cvssSeverity","MEDIUM","cvssVersion",3,"parsedVector",{"_118":119,"_120":121,"_122":119,"_123":119,"_124":125,"_126":119,"_127":119,"_128":121},"attackVector","N","attackComplexity","L","privilegesRequired","userInteraction","scope","U","confidentialityImpact","integrityImpact","availabilityImpact","exploitabilityScore","3.9","exploits",[],[134],{"_87":88,"_89":90,"_91":92},"packages",[137,149],{"_138":139,"_140":141,"_142":-5,"_143":-5,"_144":145,"_146":147,"_148":12},"fullName","github.com/azure/go-ntlmssp","type","golang","osName","osVersion","affectedRange","<0.1.1","fixVersion","0.1.1","isHighlighted",{"_138":139,"_140":141,"_142":-5,"_143":-5,"_144":150,"_146":151,"_148":12},"<0.0.0-20260423075154-bd8579c18d41","0.0.0-20260423075154-bd8579c18d41","advisories",[154],"https://github.com/Azure/go-ntlmssp/security/advisories/GHSA-pjcq-xvwq-hhpj","patches",[],"commits",[],"info",[161],"https://github.com/Azure/go-ntlmssp/releases/tag/v0.1.1","now",1776987431591,"actionData","errors"]

CVE-2026-32952

Summary

Common Weakness Enumeration (CWE)

CWE-190⁠

Advisories

GitHub

CVSS SCORE