GHSA-44xq-r8h3-q4q6
GitHub Security Advisory
⚠ Unreviewed
MODERATE
Has CVE
Advisory Details
In ssh-agent in OpenSSH before 9.6, certain destination constraints can be incompletely applied. When destination constraints are specified during addition of PKCS#11-hosted private keys, these constraints are only applied to the first key, even if a PKCS#11 token returns multiple keys.
Related CVEs
Key Information
5.0
/10
Dataset
Last updated: September 11, 2025 6:07 AM
Data from GitHub Advisory Database. This information is provided for research and educational purposes.