https://db.gcve.eu Contains only the most 10 recent entries. http://www.rssboard.org/rss-specification python-feedgen en Mon, 19 Oct 2026 05:43:02 +0000 https://db.gcve.eu/vuln/fkie_cve-2026-77375 <p>SFTPGo is an open source, event-driven file transfer solution. Prior to 2.7.5, an authenticated SSH user can send a malformed protocol message while opening a channel, causing an unhandled error that terminates the server process and affects all connected users until restart. No confidentiality or integrity impact has been identified. This issue is fixed in 2.7.5.</p> <p>SFTPGo is an open source, event-driven file transfer solution. Prior to 2.7.5, an authenticated SSH user can send a malformed protocol message while opening a channel, causing an unhandled error that terminates the server process and affects all connected users until restart. No confidentiality or integrity impact has been identified. This issue is fixed in 2.7.5.</p> https://db.gcve.eu/vuln/fkie_cve-2026-77375 https://db.gcve.eu/vuln/ghsa-q7pc-356p-hggc <p><strong>Affected:</strong> Go: github.com/drakkan/sftpgo/v2</p> <p>### Summary</p> <p>A flaw in the SSH service allows an authenticated client to crash the server by sending a malformed protocol message while opening a channel.</p> <p>### Impact</p> <p>Any user able to authenticate over SSH can trigger an unhandled error condition that aborts the server process. This results in a denial of service affecting all connected users until the service is restarted. No confidentiality or integrity impact has been identified; the issue is limited to availability.</p> <p><strong>Affected:</strong> Go: github.com/drakkan/sftpgo/v2</p> <p>### Summary</p> <p>A flaw in the SSH service allows an authenticated client to crash the server by sending a malformed protocol message while opening a channel.</p> <p>### Impact</p> <p>Any user able to authenticate over SSH can trigger an unhandled error condition that aborts the server process. This results in a denial of service affecting all connected users until the service is restarted. No confidentiality or integrity impact has been identified; the issue is limited to availability.</p> https://db.gcve.eu/vuln/ghsa-q7pc-356p-hggc