LI
Product
libssh2
25
CVEs
0
On KEV
9.1
Max CVSS
0
New 30D
Severity mix
Critical 5High 15Medium 4Low 0
Watch
Add libssh2 to your stack to get only the CVEs that touch what you run.
| CVE | CVSS | Published | Summary · affected versions |
|---|---|---|---|
| CVE-2026-58051 | 6.5 | Jun 28 | libssh2 - Free of Uninitialized Pointer in publickey List Cleanup Affected: through 1.11.1 |
| CVE-2025-15661 | 6.5 | Jun 18 | libssh2 - Heap Buffer Over-read via sftp_symlink() in sftp.c Affected: through 1.11.1 |
| CVE-2023-48795 | 5.9 | Dec 18 | The SSH transport protocol with certain OpenSSH extensions, found in OpenSSH before 9.6 and other products, allows remote attackers to bypass integrity checks such that some… Affected: before 1.11.1 |
| CVE-2016-0787 | 5.9 | Apr 13 | The diffie_hellman_sha256 function in kex.c in libssh2 before 1.7.0 improperly truncates secrets to 128 or 256 bits, which makes it easier for man-in-the-middle attackers to… Affected: through 1.6.0 |
Showing 4