Authentication Bypass

github.com/openpubkey/opkssh is vulnerable to Authentication Bypass. The vulnerability is due to insufficient validation of JWS structures due to a flaw that allows specially crafted JWS tokens to bypass signature verification logic...

CVE-2025-4658 Authentication Bypass in OPKSSH

Versions of OpenPubkey library prior to 0.10.0 contained a vulnerability that would allow a specially crafted JWS to bypass signature verification. As OPKSSH depends on the OpenPubkey library for authentication, this vulnerability in OpenPubkey also applies to OPKSSH versions prior to 0.5.0 and...