cbssh vulnerabilities
CVEs whose affected-version data names the cbssh package. Each record lists the affected and patched versions; check a specific version with the dependency checker or POST /api/sbom.
2 CVEsRSS
CVE-2026-54700Medium· 6.9ConnectBot SSH Client Library is written in Kotlin with Kaitai Struct and KStateMachine
ConnectBot SSH Client Library is written in Kotlin with Kaitai Struct and KStateMachine. Prior to 0.3.1, the SSH protocol parser trusts attacker-controlled inner byte lengths and element counts without verifying that they fit in the cont…
▾ Sunlitconnectbot · cbsshEPSS 0.37%via NVD
CVE-2026-54697Medium· 6.7ConnectBot SSH Client Library is written in Kotlin with Kaitai Struct and KStateMachine
ConnectBot SSH Client Library is written in Kotlin with Kaitai Struct and KStateMachine. Prior to 0.3.1, DerReader.readLength() accepts excessive long-form DER length octets, accumulates them into an Int, and primitive readers allocate a…
▾ Sunlitconnectbot · cbsshEPSS 0.13%via NVD