VYPR

ssh

by Erlang

Source repositories

CVEs (2)

  • CVE-2025-48040MedSep 11, 2025
    risk 0.38cvss epss 0.00

    Uncontrolled Resource Consumption vulnerability in Erlang OTP ssh (ssh_sftp modules) allows Excessive Allocation, Flooding. This vulnerability is associated with program files lib/ssh/src/ssh_sftpd.erl. This issue affects OTP from OTP 17.0 until OTP 28.0.3, OTP 27.3.4.3 and…

  • CVE-2011-0766May 31, 2011
    risk 0.00cvss epss 0.03

    The random number generator in the Crypto application before 2.0.2.2, and SSH before 2.0.5, as used in the Erlang/OTP ssh library before R14B03, uses predictable seeds based on the current time, which makes it easier for remote attackers to guess DSA host and SSH session keys.