org.apache.sshd:sshd-scp vulnerabilities

CVEs whose affected-version data names the org.apache.sshd:sshd-scp package. Each record lists the affected and patched versions; check a specific version with the dependency checker or POST /api/sbom.

1 CVERSS

CVE-2026-93996Medium· 6.5

today

Apache MINA SSHD: Memory exhaustion DoS via unbounded SCP command line read

Uncontrolled resource consumption in component ssd-scp in Apache MINA SSHD versions up to 2.19.0 or 3.0.0-M1 to 3.0.0-M5. Apache MINA SSHD is a Java library for client-side and server-side SSH. Component sshd-scp of Apache MINA SSHD …

▾ SunlitApache Software Foundation · org.apache.sshd:sshd-scpvia CVEORG