Astra Linux - уязвимость в libssh

A flaw was discovered in the libssh API function sshscpnew, in versions prior to 0.9.3 and prior to 0.8.8. When the libssh SCP client connects to a server, the scp command, which includes a path provided by the user, is executed on the server side. If the library is used in a way that allows user...

CVE-2026-45314

Open WebUI is a self-hosted artificial intelligence platform designed to operate entirely offline. Prior to 0.9.3, the channel webhook create/update flow accepts arbitrary profileimageurl values, including data:image/svg+xml;base64,... payloads. The profile image endpoint then decodes and serves...

PT-2002-1458 · Ethereal · Ethereal

Name of the Vulnerable Software and Affected Versions: Ethereal versions prior to 0.9.3 Description: The issue allows remote attackers to cause a denial of service, specifically memory consumption, by exploiting a vulnerability in the GIOP dissector. Recommendations: For versions prior to 0.9.3,...