{"id":"GHSA-r3xx-hw22-6h6w","aliases":["JLSEC-2026-791"],"status":"published","title":"Writing to SFTP files resulting in sending out-of-bounds data to the server","description":"### Impact\n\nThe `write(::SftpFile, ::DenseVector)` method assumed that the element type of the input vector had a size of 1 byte (e.g. `Int8`/`UInt8`), and used `length(data)` instead of `sizeof(data)` to get the number of bytes to send. If the input vector had a eltype with size more than 1 byte then this would result in some bytes *before* the vector in memory being sent (or a segfault).\n\nAny user writing to an `SftpFile` is potentially impacted.\n\n### Patches\n\nThe bug has been fixed in LibSSH v1.2.0.\n\n### Workarounds\n\nEnsure that all inputs to writing `SftpFile`'s are byte vectors.","severity":{"version":"3.1","score":3.9,"vector":"CVSS:3.1/AV:L/AC:L/PR:L/UI:R/S:U/C:L/I:N/A:L","level":"low","from":"osv"},"facts":{"in_kev":false,"known_exploited":false,"public_exploit":false,"fix_available":true},"published":"2026-07-25T03:32:48.775Z","modified":"2026-07-25T03:45:04Z","fixes":[{"ecosystem":"Julia","package":"LibSSH","fixed_in":["1.1.0"],"sources":["osv"]}],"affected":[{"source":"osv","ecosystem":"Julia","package":"LibSSH","ranges":[{"type":"SEMVER","events":[{"introduced":"0"},{"fixed":"1.1.0"}]}]}],"sources":{"osv":[{"id":"JLSEC-2026-791","title":"Writing to SFTP files resulting in sending out-of-bounds data to the server","description":"### Impact\n\nThe `write(::SftpFile, ::DenseVector)` method assumed that the element type of the input vector had a size of 1 byte (e.g. `Int8`/`UInt8`), and used `length(data)` instead of `sizeof(data)` to get the number of bytes to send. If the input vector had a eltype with size more than 1 byte then this would result in some bytes *before* the vector in memory being sent (or a segfault).\n\nAny user writing to an `SftpFile` is potentially impacted.\n\n### Patches\n\nThe bug has been fixed in LibSSH v1.2.0.\n\n### Workarounds\n\nEnsure that all inputs to writing `SftpFile`'s are byte vectors.","status":"published","published":"2026-07-25T03:32:48.775Z","modified":"2026-07-25T03:45:04.11129387Z","cvss":[{"version":"3.1","score":3.9,"vector":"CVSS:3.1/AV:L/AC:L/PR:L/UI:R/S:U/C:L/I:N/A:L","level":"low"}],"updated_at":"2026-11-02T15:47:19.003546Z"}]}}