Security update for apache-sshd, jpgpj

This update for apache-sshd, jpgpj fixes the following issues CVE-2020-36843: no check performed on scalar to avoid signature malleability bsc1239551. CVE-2026-48827: Apache MINA SSHD: Path traversal in org.apache.sshd: sshd-git bsc1267018. Changes for jpgpj: Initial packaging with v1.3 Changes f...

SUSE-SU-2026:2472-1 Security update for apache-sshd, jpgpj

This update for apache-sshd, jpgpj fixes the following issues - CVE-2020-36843: no check performed on scalar to avoid signature malleability bsc1239551. - CVE-2026-48827: Apache MINA SSHD: Path traversal in org.apache.sshd: sshd-git bsc1267018. Changes for jpgpj: - Initial packaging with v1.3...

ShellShock - Remote Code Execution

GNU Bash through 4.3 processes trailing strings after function definitions in the values of environment variables, which allows remote attackers to execute arbitrary code via a crafted environment, as demonstrated by vectors involving the ForceCommand feature in OpenSSH sshd, the modcgi and modcg...

Exploit for Embedded Malicious Code in Tukaani Xz

XZ Backdoor Labs CVE-2024-3094 Safe, hands-on labs for...

Malicious code in india-map-react (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector a1de9d093e23698e3ad3f0336a7619bd43049d1f62b822744733a48060b51a4a package.json declares a postinstall hook that runs curl -skL...

org.jenkins-ci.main:jenkins-test-harness (1.446), org.jenkins-ci.main:jenkins-war (1.446) +5 more potentially affected by CVE-2026-53438 via org.jenkins-ci.main:jenkins-core (1.446)

org.jenkins-ci.main:jenkins-core MAVEN version 1.446 is affected by a known vulnerability. The following packages have a transitive dependency on org.jenkins-ci.main:jenkins-core and may be impacted: - org.jenkins-ci.main:jenkins-test-harness 1.446 - org.jenkins-ci.main:jenkins-war 1.446 -...

org.jenkins-ci.main:jenkins-test-harness (1.446), org.jenkins-ci.main:jenkins-war (1.446) +5 more potentially affected by CVE-2026-53440 via org.jenkins-ci.main:jenkins-core (1.446)

org.jenkins-ci.main:jenkins-core MAVEN version 1.446 is affected by a known vulnerability. The following packages have a transitive dependency on org.jenkins-ci.main:jenkins-core and may be impacted: - org.jenkins-ci.main:jenkins-test-harness 1.446 - org.jenkins-ci.main:jenkins-war 1.446 -...

org.jenkins-ci.main:jenkins-test-harness (1.446), org.jenkins-ci.main:jenkins-war (1.446) +5 more potentially affected by CVE-2026-53435 via org.jenkins-ci.main:jenkins-core (1.446)

org.jenkins-ci.main:jenkins-core MAVEN version 1.446 is affected by a known vulnerability. The following packages have a transitive dependency on org.jenkins-ci.main:jenkins-core and may be impacted: - org.jenkins-ci.main:jenkins-test-harness 1.446 - org.jenkins-ci.main:jenkins-war 1.446 -...

org.jenkins-ci.main:jenkins-test-harness (1.444), org.jenkins-ci.main:jenkins-war (1.444) +10 more potentially affected by CVE-2026-53439 via org.jenkins-ci.main:jenkins-core (1.444)

org.jenkins-ci.main:jenkins-core MAVEN version 1.444 is affected by a known vulnerability. The following packages have a transitive dependency on org.jenkins-ci.main:jenkins-core and may be impacted: - org.jenkins-ci.main:jenkins-test-harness 1.444 - org.jenkins-ci.main:jenkins-war 1.444 -...

org.jenkins-ci.main:jenkins-test-harness (1.446), org.jenkins-ci.main:jenkins-war (1.446) +5 more potentially affected by CVE-2026-53437 via org.jenkins-ci.main:jenkins-core (1.446)

org.jenkins-ci.main:jenkins-core MAVEN version 1.446 is affected by a known vulnerability. The following packages have a transitive dependency on org.jenkins-ci.main:jenkins-core and may be impacted: - org.jenkins-ci.main:jenkins-test-harness 1.446 - org.jenkins-ci.main:jenkins-war 1.446 -...

CVE-2026-48827

A flaw was found in Apache MINA SSHD bundle sshd-git. This path traversal vulnerability allows authenticated users to access Git repositories located outside the intended server root directory. The lack of proper path validation during Git operations, such as git-upload-pack and git-receive-pack,...

apache-sshd-2.18.0-1.1 on GA media (moderate)

apache-sshd-2.18.0-1.1 on GA media Announcement ID: openSUSE-SU-2026:10919-1 Rating: moderate Cross-References: CVE-2020-36843 CVE-2026-48827 CVSS scores: CVE-2020-36843 SUSE : 7.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:H/A:N CVE-2020-36843 SUSE : 8.7...

CVE-2026-10650 warmcat libwebsockets SSH Protocol sshd.c lws_ssh_parse_plaintext resource consumption

A flaw has been found in warmcat libwebsockets up to 4.5.8. This issue affects the function lwssshparseplaintext of the file plugins/protocollwssshbase/sshd.c of the component SSH Protocol Handler. Executing a manipulation of the argument msglen can lead to resource consumption. The attack may be...

SUSE CVE-2026-48827

Path traversal vulnerability in Apache MINA SSHD bundle sshd-git. Lack of path validation in git-upload-pack, git-receive-pack, and other git operations allows users authenticated over SSH access to git repositories outside the configured git server root directory. Applications are affected if th...

Linux Distros Unpatched Vulnerability : CVE-2026-48827

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - Path traversal vulnerability in Apache MINA SSHD bundle sshd-git. Lack of path validation in git-upload- pack, git-receive-pack, and other git operations allows...

Libwebsockets security vulnerabilities

Libwebsockets is a standardized network library open-sourced by the lws-team. Versions of Libwebsockets 4.5.8 and earlier contain security vulnerabilities. These vulnerabilities stem from the lwssshParseplaintext function in the SSH Protocol Handler component’s plugins/protocollwssshbase/sshd.c...

org.apache.sshd:apache-sshd (>=3.0.0-m1, <=3.0.0-m3) potentially affected by CVE-2026-48827 via org.apache.sshd:sshd-git (>=3.0.0-m1, <=3.0.0-m3)

org.apache.sshd:sshd-git MAVEN version =3.0.0-m1, =3.0.0-m1, =3.0.0-m3 Source cves: CVE-2026-48827 Source advisory: SNYK:JAVA-ORGAPACHESSHD-17151844...

GHSA-MW4M-QHPG-J82M Apache MINA SSHD bundle sshd-git has a path traversal vulnerability

There is a path traversal vulnerability in Apache MINA SSHD bundle sshd-git. Lack of path validation in git-upload-pack, git-receive-pack, and other git operations allows users authenticated over SSH access to git repositories outside the configured git server root directory. Applications are...

com.infobip.kafkistry:kafkistry-app (>=0.7.0, <=0.10.2), com.infobip.kafkistry:kafkistry-auditing (>=0.7.0, <=0.10.2) +21 more potentially affected by CVE-2026-48827 via org.apache.sshd:sshd-git (>=2.2.0, <=2.17.1)

org.apache.sshd:sshd-git MAVEN version =2.2.0, =0.7.0, =0.7.0, =0.7.0, =0.7.0, =0.9.9, =0.7.0, =0.7.0, =0.7.0, =0.7.0, =0.7.0, =0.7.0, =0.7.0, =0.62.0, =1.94.0, =1.0.0, =1.1.1 and more Source cves: CVE-2026-48827 Source advisory: OSV:GHSA-MW4M-QHPG-J82M...

org.apache.sshd:apache-sshd (>=3.0.0-m1, <=3.0.0-m3) potentially affected by CVE-2026-48827 via org.apache.sshd:sshd-git (>=3.0.0-m1, <=3.0.0-m3)

org.apache.sshd:sshd-git MAVEN version =3.0.0-m1, =3.0.0-m1, =3.0.0-m3 Source cves: CVE-2026-48827 Source advisory: GHSA-MW4M-QHPG-J82M...