Known vulnerabilities in libssh2-devel

Vendor: OpenAnolis
Software: libssh2-devel
Software CPE: cpe:2.3:o:openanolis:libssh2-devel:*:*:*:*:*:anolis_os:*:*
Website: https://openanolis.cn/
Total vulnerabilities: 4
Public exploits: 1
Known exploited (KEV): 0
Highest CVSSv4 Score: 8.8

Breakdown by Severity Chart

Severity distribution of vulnerabilities affecting libssh2-devel libssh2-devel is affected by 4 known vulnerabilities: 3 medium, 1 low Critical High Medium Low

Vulnerabilities (4)

Vulnerability CWE-ID CSH Severity Public Exploit KEV First fixed release Published Bulletins
#VU136048 - Loop with Unreachable Exit Condition ('Infinite Loop')
CVE-2026-55199		 CWE-835 Medium
No
No
 1.11.0-6 01.07.2026 SB2026070130
SB2026070134
SB2026070138
and 13 more
#VU136047 - Out-of-bounds read
CVE-2025-15661		 CWE-125 Medium
No
No
 1.11.1-1 01.07.2026 SB2026070130
SB2026070134
SB2026071934
and 4 more
#VU84537 - Inadequate Encryption Strength
CVE-2023-48795		 CWE-326 Low
Available
No
 1.11.0-3 19.12.2023 SB2023121903
SB2023121905
SB2023121906
and 343 more
#VU80523 - Out-of-bounds write
CVE-2020-22218		 CWE-787 Medium
No
No
 1.8.0-4 07.09.2023 SB2023090729
SB2023090732
SB2023090843
and 21 more