What is GHSA-j4h6-744f-q3hq?

GHSA-j4h6-744f-q3hq is a security advisory published by GitHub Security Advisories with Medium severity. In sshd and ssh in OpenSSH before 10.6, there is no check for whether the maximum packet length...

Which CVE IDs does GHSA-j4h6-744f-q3hq cover?

GHSA-j4h6-744f-q3hq covers the following CVE IDs: CVE-2026-106585. Each CVE has its own detail page on EchelonGraph Pulse with the synthesized EG score.

What is the CVSS v3 score of GHSA-j4h6-744f-q3hq?

GHSA-j4h6-744f-q3hq has a CVSS v3 base score of 6.5, published by GitHub Security Advisories.

GHSA-j4h6-744f-q3hqMediumCVSS 6.5

In sshd and ssh in OpenSSH before 10.6, there is no check for whether the maximum packet length...

Vendor

GitHub Security Advisories

Published

October 6, 2026

Last Modified

October 6, 2026

🔗 CVE IDs covered (1)

CVE-2026-106585 →

📋 Description

In sshd and ssh in OpenSSH before 10.6, there is no check for whether the maximum packet length is exceeded during decompression of highly compressed data.

🔗 References (3)

https://nvd.nist.gov/vuln/detail/CVE-2026-106585
https://www.openssh.org/releasenotes.html#10.6
https://github.com/advisories/GHSA-j4h6-744f-q3hq