GHSA-4cqc-m8hm-7c9jHighCVSS 7.4

When libcurl uses libssh2 with a hashed `known_hosts` file, an unrelated initial entry can cause...

Published
October 20, 2026
Last Modified
October 30, 2026

🔗 CVE IDs covered (1)

📋 Description

When libcurl uses libssh2 with a hashed known_hosts file, an unrelated initial entry can cause host key validation to report a key mismatch as a missing key to the CURLOPT_SSH_KEYFUNCTION callback.

🔗 References (5)