Skip to main content
cve.nowby Sazabi
← Maven
MavenPackage

org.apache.sshd:sshd-scp

1 known vulnerability (1 high), with the versions each affects and the releases that fix them.

Latest release
2.20.1 (Oct 29, 2026): no advisory affects it
Newest unaffected release
2.20.1 (Oct 29, 2026), the latest release
Advisories
1 · 1 high
Dependents
3
Releases
37 since 2.0.0 (May 28, 2018)
Registry
Maven Central
Releases read
Nov 8, 2026

Version timeline

  • CVE-2026-56452
    Affects 2.0.0 to 2.18.0 (2.19.0 is outside it); 3.0.0-M1 to 3.0.0-M4 (3.0.0-M5 is outside it)
Every release cve.now has on record, lowest version on the left; each bar is a run of versions an advisory affects.

Advisories 1

  • Apache MINA SSHD: Path traversal in SCP file reception

    Affected: through 2.18.0; from 3.0.0-M1, through 3.0.0-M4.

    No fix released.