Build, ship, and run secure software with minimal, hardened container images — rebuilt from source daily and guarded under our industry-leading remediation SLA.
Start for freeStatus
Justification
Impact
The referenced flaws are in the libssh library from libssh.org, an unrelated project that shares no code with this one. They concern server-side GSSAPI key exchange, SFTP server request handling and ProxyCommand expansion, none of which exist in a client-only implementation that provides no GSSAPI support, no configuration parsing and no server side. The detection arises from a synthesized CPE pairing a different product name with an unbounded version range, so it matches irrespective of version.
Status