Search
Search is not available in local development.
Run npx pagefind --site __site after building to enable it.
JLSEC-2026-431 Low 3.1

When doing SSH-based transfers using either SCP or SFTP, and asked to do public key...

JLSEC Published
Modified
Severity
CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:U/C:N/I:L/A:N
Affected Packages
CURL_jll < 8.20.0+0
LibCURL_jll < 8.18.0+0
Aliases / Upstream
CVE-2025-15224 GHSA-hccr-q52r-4w88 EUVD-2026-1569

When doing SSH-based transfers using either SCP or SFTP, and asked to do public key authentication, curl would wrongly still ask and authenticate using a locally running SSH agent.

References