https://cve.radiocsirt.org/rss/recent/all/10 Most recent entries from all 2026-10-24T21:22:28.802315+00:00 Vulnerability-Lookup csirt@opendfir.org python-feedgen Contains only the most 10 recent entries. https://cve.radiocsirt.org/vuln/euvd-2026-46072 EUVD-2026-46072 2026-10-24T21:22:28.806044+00:00 EUVD-2026-46072 https://cve.radiocsirt.org/vuln/fkie_cve-2020-26301 fkie_cve-2020-26301 2026-10-24T21:22:28.806077+00:00

ssh2 is client and server modules written in pure JavaScript for node.js. In ssh2 before version 1.4.0 there is a command injection vulnerability. The issue only exists on Windows. This issue may lead to remote code execution if a client of the library calls the vulnerable method with untrusted input. This is fixed in version 1.4.0.

 https://cve.radiocsirt.org/vuln/ghsa-652h-xwhf-q4h6 GHSA-652h-xwhf-q4h6 — OS Command Injection in ssh2 2026-10-24T21:22:28.806109+00:00

Affected: npm: ssh2

ssh2 is client and server modules written in pure JavaScript for node.js. In ssh2 before version 1.4.0 there is a command injection vulnerability. The issue only exists on Windows. This issue may lead to remote code execution if a client of the library calls the vulnerable method with untrusted input. This is fixed in version 1.4.0.

 https://cve.radiocsirt.org/vuln/gsd-2020-26301 gsd-2020-26301 2026-10-24T21:22:28.806133+00:00 gsd-2020-26301 https://cve.radiocsirt.org/vuln/rhsa-2021:4845 RHSA-2021:4845 — Red Hat Security Advisory: Red Hat OpenShift Container Storage 4.8.5 Security and Bug Fix Update 2026-10-24T21:22:28.806145+00:00

nodejs-ssh2: Command injection by calling vulnerable method with untrusted input