← All credits
Michał Wąsowski
8 vulnerability records and advisories credit this contributor.
CVE-2026-59251
Denial of service via exponential certificate policy tree growth in path validation
CVE-2026-48859
SSH server timing side-channel in ssh_auth:check_password/3 allows unauthenticated username enumeration
CVE-2026-54886
SSH SFTP server denial of service via extended channel data infinite loop
CVE-2026-53422
SFTP REALPATH path-existence oracle allowing filesystem enumeration outside configured root
CVE-2026-48855
SFTP READLINK Leaks Absolute Backend Filesystem Path When Root Is Configured
CVE-2026-32147
SFTP chroot bypass via path traversal in SSH_FXP_FSETSTAT
CVE-2026-23943
Pre-auth SSH DoS via unbounded zlib inflate
CVE-2026-23942
SFTP root escape via component-agnostic prefix check in ssh_sftpd