TI-2026-41806 CVE-2026-58051 · GHSA-c5f3-hwj2-xp5p
libssh2 - Free of Uninitialized Pointer in publickey List Cleanup
Priority HIGH 69
libssh2 through 1.11.1 grows its publickey list with SSH2_REALLOC but does not zero-initialize new entries before parsing populates them, so a parse failure reaching the cleanup path leaves libssh2_publickey_list_free op…