CyberSecBulletin

OPKSSH vulnerabilities

We track 1 vulnerability in OPKSSH products. 1 is rated high or critical, and none are known to be exploited. The most recent was published on May 13, 2025.

1vulnerabilities
1critical
0high
0exploited
9.8average CVSS score

Latest OPKSSH vulnerabilities

  • 9.8 Critical severity

    OPKSSH: Improper Verification of Cryptographic Signature

    CVE-2025-4658OPKSSH

    Versions of OpenPubkey library prior to 0.10.0 contained a vulnerability that would allow a specially crafted JWS to bypass signature verification. As OPKSSH depends on the OpenPubkey library for authentication, this vulnerability in OpenPubkey also applies to