GHSA-r3xx-hw22-6h6w

Writing to SFTP files resulting in sending out-of-bounds data to the server

3.9 LowFix available

GHSA-r3xx-hw22-6h6w is a low vulnerability (CVSS 3.9) in LibSSH, published July 25, 2026. No source lists public exploit code. Fixed in LibSSH 1.1.0.

What does this mean?

Severity: 3.9 LowCVSS 3.1, OSV
Exploit chance: UnscoredNo EPSS score yet
Exploitation: None knownNot on CISA’s or ENISA’s lists
Fixed in: 1.1.0LibSSH

Description

Impact

The write(::SftpFile, ::DenseVector) method assumed that the element type of the input vector had a size of 1 byte (e.g. Int8/UInt8), and used length(data) instead of sizeof(data) to get the number of bytes to send. If the input vector had a eltype with size more than 1 byte then this would result in some bytes before the vector in memory being sent (or a segfault).

Any user writing to an SftpFile is potentially impacted.

Patches

The bug has been fixed in LibSSH v1.2.0.

Workarounds

Ensure that all inputs to writing SftpFile's are byte vectors.

Attack profile

How easy it is to exploit

Attack vector: Local
Complexity: Low
Privileges needed: Low
User interaction: Required

What an attacker can affect

Confidentiality: Low
Integrity: None
Availability: Low

Affected packages

Affected packages
Package	Affected	Fixed
`LibSSH` Julia	before 1.1.0	1.1.0

What each source reports

OSV Score usedJLSEC-2026-7913.9

Writing to SFTP files resulting in sending out-of-bounds data to the server