Search results

Memory leak: knownhost_add() leaks the base64-decoded buffer on the "invalid value" error path (attacker-controlled, up to 254 bytes/line)

Status: Open.

#1957 In libssh2/libssh2;

· OwenSanzas opened on May 31, 2026

Memory leak: re-entrant transport read during KEX leaves session->packet.payload unfreed

Status: Open.

#1956 In libssh2/libssh2;

· OwenSanzas opened on May 31, 2026

Request for release (v1.11.2) to address CVE-2026-7598(integer overflow)

Status: Open.

#1925 In libssh2/libssh2;

· yeshwanthyeah-ship-it opened on May 8, 2026

ssh2_exec() silently fails with OpenSSL 3.0.18 on Debian 12.13 (works with 3.0.17)

Status: Open.

#1840 In libssh2/libssh2;

· MagnaCapax opened on Apr 9, 2026

ECDH key exchange fails with OpenSSL 3: compressed EC point sent instead of uncompressed

Status: Open.

#1819 In libssh2/libssh2;

· rlerdorf opened on Mar 17, 2026

To avoid interfering with auth, send keepalives at the end of the interval instead of the beginning

Status: Open.

#1810 In libssh2/libssh2;

· MatrixManAtYrService opened on Mar 1, 2026

Tests fail when building Debian testing package - test_sshd.test 1 - sshd-test_ssh2

Status: Open.

#1808 In libssh2/libssh2;

· babelouest opened on Feb 27, 2026

Single-session, multi-channel issue

Status: Open.

#1801 In libssh2/libssh2;

· 1dao opened on Feb 12, 2026

scp_recv2 - cannot download file with a name longer than 246 chars

feature-request

Status: Open.

#1738 In libssh2/libssh2;

· psiquo opened on Nov 4, 2025

Memory Leak in libssh2_session_free

Status: Open.

#1691 In libssh2/libssh2;

· LkkkLxy opened on Sep 30, 2025

The write stucks at the transport layer.

Status: Open.

#1672 In libssh2/libssh2;

· cyberslav-games opened on Sep 22, 2025

libssh2_userauth methods always indicate error when additional auth steps are required by server

Status: Open.

#1612 In libssh2/libssh2;

· ion201 opened on Jun 18, 2025