A vulnerability, which was classified as problematic, has been found in x-crypto up to 0.30.x on Go. Affected by this issue is the function
ServerConfig.PublicKeyCallback. The manipulation leads to excessive reliance on global variables.
This vulnerability is handled as CVE-2024-45337. Access to the local network is required for this attack to succeed. There is no exploit available.
It is recommended to upgrade the affected component.
