CVE-2025-22869

SSH servers implementing file transfer protocols are vulnerable to a Denial of Service (DoS) attack due to a resource exhaustion issue (CWE-770 ). A client can complete the key exchange slowly or not at all, forcing the server to read pending content into memory without transmitting it. This vuln...

CVE-2025-47913

SSH clients are vulnerable to a panic and early termination of the client process when receiving an SSH_AGENT_SUCCESS message while expecting a typed response. This issue is caused by a reachable assertion (CWE-617) in the golang.org/x/crypto/ssh/agent component. Affected products include IBM Sec...