Skip to content
OpenAdvisories

Package · Debian

jsch

2 known vulnerabilities.

All Critical High Medium Low Exploited only Public exploit

2 results · Feed

  • Low 3.7
    CVE-2026-86231

    mwiede jsch KnownHosts.java getRevokedKeys improper check for certificate revocation

    A security flaw has been discovered in mwiede jsch up to 2.28.5. Affected is the function getRevokedKeys of the file src/main/java/com/jcraft/jsch/KnownHosts.java. Performing a manipulation of the argument known_hosts results in improper check for certificate…

    mwiede jsch jsch jsch Debian Ubuntu
  • Medium 5.9
    CVE-2016-5725 Public exploit EPSS 24%

    Improper Limitation of a Pathname to a Restricted Directory in JCraft JSch

    Directory traversal vulnerability in JCraft JSch before 0.1.54 on Windows, when the mode is ChannelSftp.OVERWRITE, allows remote SFTP servers to write to arbitrary files via a ..\ (dot dot backslash) in a response to a recursive GET command.

    jsch com.jcraft:jsch Debian Maven