tag
Integer-Overflow
Critical
libssh2 Unchecked SSH packet_length Integer Wrap to RCE (CVE-2026-55200)
CVE-2026-55200·
libssh2, ssh2_transport_read() in src/transport.c
patched
Critical
libssh2 Publickey Subsystem List Parser Heap Corruption to Code Execution
None assigned as of 2026-07-03·
libssh2, publickey subsystem list parser (src/publickey.c)
unpatched
Medium
libarchive ZIP Declared-Size Boundary Bypass via debuginfod
None assigned as of 2026-07-03·
libarchive (ZIP reader) and elfutils debuginfod
unpatched
Critical
libssh2 SSH Packet Length OOB Heap Write / Unauthenticated RCE (CVE-2026-55200)
CVE-2026-55200·
libssh2 (SSH client library)
patched