Known vulnerabilities and malicious package reports for org.connectbot.sshlib:sshlib on Maven, live from OSV, with CISA KEV exploitation status and EPSS scores.
0 malicious package reports and 2 vulnerabilities returned by OSV. Check a specific version to see which reports apply.
ConnectBot SSH Client Library: Unbounded SSH field lengths can cause excessive memory allocation
Published .
Updated .
Reported affected releases: 0.1.2, 0.1.3, 0.1.4, 0.2.0, 0.2.1, 0.3.0.
Affected ranges: introduced 0, last_affected 0.3.0.
Severity: MEDIUM.
ConnectBot SSH Client Library: Excessive allocation and integer overflow in DER private-key parsing
Published .
Updated .
Reported affected releases: 0.1.2, 0.1.3, 0.1.4, 0.2.0, 0.2.1, 0.3.0.
Affected ranges: introduced 0, last_affected 0.3.0.
Severity: MEDIUM.
Source: OSV, including OpenSSF malicious-package reports and GitHub advisories. No known report is not proof a package is safe.