Read the docs

Ssh2 Project

Records2All Threatist records
Exploited (KEV)0None in CISA KEV
CVSS critical1CVSS 9.0–10.0
CVSS high0CVSS 7.0–8.9

Exploited now

Ssh2 Project records in CISA KEV

No Ssh2 Project vulnerabilities are listed in CISA KEV.

Components

Products in the NVD configurations · select one to filter the records
Ssh2 2 records HIGH

Records

2 records in Ssh2 · all components

TI-2023-26623 CVE-2023-48795 · GHSA-45x7-px36-x8w8

The SSH transport protocol with certain OpenSSH extensions, found in OpenSSH before 9.6…

Priority HIGH 70

The SSH transport protocol with certain OpenSSH extensions, found in OpenSSH before 9.6 and other products, allows remote attackers to bypass integrity checks such that some packets are omitted (from the extension negoti…

CVSS 3.1MEDIUM 5.9 Network No auth No interaction EPSS 0.93547 Published 2023-12-18 Partial fix · 0.40.2, 0.17.0 +2 CWE-354
TI-2020-16122 CVE-2020-26301 · GHSA-652h-xwhf-q4h6

Command injection in mscdex/ssh2

Priority MEDIUM 49

ssh2 is client and server modules written in pure JavaScript for node.js.

CVSS 3.1CRITICAL 10.0 Network No auth No interaction EPSS 0.03832 Published 2021-09-20 Partial fix · 1.4.0 CWE-78
Open these records in search →