To report security issues privately, please use GitHub's private vulnerability reporting feature which is enabled for this repository. The maintainers will endeavour to acknowledge the report within 14 calendar days.
Repository navigation
Security: sshnet/SSH.NET
Security
SECURITY.md
-
Pre-auth unbounded memory growth in SSH identification string parsingGHSA-h5q6-2gr6-3g3m published
Aug 9, 2026 by Rob-HagueHigh -
Infinite loop with channel maximum_packet_size=0GHSA-vhpg-4g9v-rppq published
Aug 9, 2026 by Rob-HagueModerate -
ScpClient recursive download allows arbitrary file write via server-controlled SCP filenamesGHSA-q939-rpr3-3284 published
Aug 9, 2026 by Rob-HagueHigh -
ScpClient allows server-side RCE via default SCP path handlingGHSA-mggc-4xg6-vcxf published
Aug 9, 2026 by Rob-HagueHigh -
Weak private key generationGHSA-72p8-v4hg-v45p published
May 29, 2022 by driesengModerate
Learn more about advisories related to sshnet/SSH.NET in the GitHub Advisory Database