To report security issues privately, please use GitHub's private vulnerability reporting feature which is enabled for this repository. The maintainers will endeavour to acknowledge the report within 14 calendar days.
Security: sshnet/SSH.NET
Security
SECURITY.md
-
Pre-auth unbounded memory growth in SSH identification string parsingGHSA-h5q6-2gr6-3g3m published
Aug 9, 2026 by Rob-HagueHigh -
Infinite loop with channel maximum_packet_size=0GHSA-vhpg-4g9v-rppq published
Aug 9, 2026 by Rob-HagueModerate -
ScpClient recursive download allows arbitrary file write via server-controlled SCP filenamesGHSA-q939-rpr3-3284 published
Aug 9, 2026 by Rob-HagueHigh -
ScpClient allows server-side RCE via default SCP path handlingGHSA-mggc-4xg6-vcxf published
Aug 9, 2026 by Rob-HagueHigh -
Weak private key generationGHSA-72p8-v4hg-v45p published
May 29, 2022 by driesengModerate
Learn more about advisories related to sshnet/SSH.NET in the GitHub Advisory Database