Search
Search is not available in local development.
Run npx pagefind --site __site after building to enable it.
JLSEC-2025-8 Low 3.6

ssh in OpenSSH before 10.1 allows the '`\0`' character in an `ssh://` URI, potentially leading to code...

SourceEditHistoryOSVJSON (OSV)
JLSEC Published
Modified
Severity
CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:L/I:L/A:N
Affected Packages
OpenSSH_jll < 10.1.1+0
Upstream
CVE-2025-61985 GHSA-8gmf-r74v-362p EUVD-2025-32134

ssh in OpenSSH before 10.1 allows the '\0' character in an ssh:// URI, potentially leading to code execution when a ProxyCommand is used.

References