Sshnet vulnerabilities
We track 2 vulnerabilities in Sshnet products. 2 are rated high or critical, and none are known to be exploited. The most recent was published on September 16, 2026.
2vulnerabilities
0critical
2high
0exploited
7.3average CVSS score
Latest Sshnet vulnerabilities
- 7.5 High severity
SSH.NET: Improper Neutralization of Special Elements used in an OS Command
SSH.NET is a Secure Shell (SSH) library for .NET. Prior to 2026.0.0, ScpClient places caller-supplied remote paths into the command used to run scp on the server, and the default RemotePathTransformation.DoubleQuote transformation cannot safely quote every rem
- 7.1 High severity
SSH.NET: Improper Limitation of a Pathname to a Restricted Directory
SSH.NET is a Secure Shell (SSH) library for .NET. In 2025.1.0 and earlier, ScpClient.Download(string directoryName, DirectoryInfo directoryInfo) trusts file and directory names returned by a remote SCP server and combines them with the requested local director