CLEANSTART-2026-ZM51114 SSH servers parsing GSSAPI authentication requests do not validate the number of mechanisms specified in the request, allowing an attacker to cause unbounded memory consumption

🗓️ 30 Jan 2026 16:08:25Reported by GoogleType

osv🔗 osv.dev👁 12 Views

Argo workflows fips vulnerability: Secure Shell GSSAPI requests lack mechanism count validation, causing unbounded memory usage.

Reporter	Title	Published	Views	Family All 2696
OSV	MINI-C7XQ-X8QR-P8RR	22 Jun 202622:43	–	osv
OSV	MINI-C837-26X8-P3VX	20 Nov 202515:12	–	osv
OSV	MINI-C89F-J347-4F7H	28 Jul 202509:17	–	osv
OSV	MINI-C8RF-54JW-44R6	28 Jul 202514:00	–	osv
OSV	MINI-CF8X-59VF-788H	21 Nov 202523:51	–	osv
OSV	MINI-CF9C-575G-GJW7	21 Nov 202505:17	–	osv
OSV	MINI-CG22-2884-2639	10 Aug 202520:01	–	osv
OSV	MINI-CG2H-JG4W-5JH6	15 Jun 202519:08	–	osv
OSV	MINI-CG34-CC2M-629V	10 Aug 202520:01	–	osv
OSV	MINI-CG78-W8WC-GPJ7	10 Dec 202515:00	–	osv

Source	Link
github	www.github.com/cleanstart-dev/cleanstart-security-advisories/tree/main/advisories/2026/CLEANSTART-2026-ZM51114.json
osv	www.osv.dev/vulnerability/CVE-2025-0913
osv	www.osv.dev/vulnerability/CVE-2025-4673
osv	www.osv.dev/vulnerability/CVE-2025-47907
osv	www.osv.dev/vulnerability/CVE-2025-58181
osv	www.osv.dev/vulnerability/CVE-2025-62156
osv	www.osv.dev/vulnerability/CVE-2025-62157
osv	www.osv.dev/vulnerability/GHSA-2x5j-vhc8-9cwm
osv	www.osv.dev/vulnerability/GHSA-c2hv-4pfj-mm2r
osv	www.osv.dev/vulnerability/GHSA-cfpf-hrx2-8rv6

09 Mar 2026 10:15Current

5.8Medium risk

Vulners AI Score5.8

CVSS 3.19.8

EPSS0.0058