https://cve.radiocsirt.org/rss/recent/all/10 Most recent entries from all 2026-10-24T21:23:06.632650+00:00 Vulnerability-Lookup csirt@opendfir.org python-feedgen Contains only the most 10 recent entries. https://cve.radiocsirt.org/vuln/cve-2020-26301 CVE-2020-26301 — Command injection in mscdex/ssh2 2026-10-24T21:23:06.633721+00:00

Affected: mscdex ssh2

ssh2 is client and server modules written in pure JavaScript for node.js. In ssh2 before version 1.4.0 there is a command injection vulnerability. The issue only exists on Windows. This issue may lead to remote code execution if a client of the library calls the vulnerable method with untrusted input. This is fixed in version 1.4.0.