JLSEC-2026-791
- Source
- https://github.com/JuliaLang/SecurityAdvisories.jl/blob/main/advisories/published/2026/JLSEC-2026-791.md
- Import Source
- https://github.com/JuliaLang/SecurityAdvisories.jl/tree/generated/osv/2026/JLSEC-2026-791.json
- JSON Data
- https://api.osv.dev/v1/vulns/JLSEC-2026-791
- Aliases
-
- GHSA-r3xx-hw22-6h6w
- Published
- 2026-07-25T03:32:48.775Z
- Modified
- 2026-07-25T03:45:04.111293870Z
- Severity
-
- 3.9 (Low) CVSS_V3 - CVSS:3.1/AV:L/AC:L/PR:L/UI:R/S:U/C:L/I:N/A:L CVSS Calculator
- Summary
- Writing to SFTP files resulting in sending out-of-bounds data to the server
- Details
-
Impact
The
write(::SftpFile, ::DenseVector)method assumed that the element type of the input vector had a size of 1 byte (e.g.Int8/UInt8), and usedlength(data)instead ofsizeof(data)to get the number of bytes to send. If the input vector had a eltype with size more than 1 byte then this would result in some bytes before the vector in memory being sent (or a segfault).Any user writing to an
SftpFileis potentially impacted.Patches
The bug has been fixed in LibSSH v1.2.0.
Workarounds
Ensure that all inputs to writing
SftpFile's are byte vectors. - Database specific
{ "license": "CC-BY-4.0", "sources": [ { "id": "GHSA-r3xx-hw22-6h6w", "published": "2026-07-23T19:14:03Z", "imported": "2026-07-23T21:55:40.451Z", "url": "https://api.github.com/repos/JuliaWeb/LibSSH.jl/security-advisories/GHSA-r3xx-hw22-6h6w", "html_url": "https://github.com/JuliaWeb/LibSSH.jl/security/advisories/GHSA-r3xx-hw22-6h6w", "modified": "2026-07-23T19:14:03Z" } ] }- References
-