Skip to content
OpenAdvisories

Package · Alpine

wolfssh

5 known vulnerabilities.

All Critical High Medium Low Exploited only Public exploit

1 result · Clear filters · Feed

  • Critical 9.0
    CVE-2026-16516

    wolfSSH ECDSA host key curve not validated against negotiated algorithm

    wolfSSH does not validate that the ECDSA curve identifier in a KEXDH_REPLY host key blob matches the algorithm negotiated during key exchange. In ParseECCPubKey() (src/internal.c), the blob's algorithm string is used to derive the curve via NameToId/wcPrimeFo…

    wolfSSL wolfSSH wolfssh Alpine