[{"data":1,"prerenderedAt":-1},["ShallowReactive",2],{"$fBFJ3cvEq2CLAMVH2ZVAowXpU9HLZKmo8Y7ypT0Vij20":3,"g5a-ex:apache\u002Fmina_sshd@*":196,"g5a-family:apache\u002Fmina_sshd":198},{"success":4,"data":5},true,{"product":6,"versions":107,"topVulnerabilitiesByEpss":153,"kevVulnerabilities":173,"seoMetadata":174,"meta":193},{"vendorName":7,"productName":8,"versionCount":9,"totalCves":10,"kevCount":11,"lastCveUpdate":12,"versions":13,"description":106},"apache","mina_sshd",45,2,0,"2024-08-12",[14,17,19,21,23,25,27,29,31,33,35,37,39,41,43,45,47,49,51,53,55,57,59,61,63,65,67,69,71,73,75,77,79,81,84,86,88,90,92,94,96,98,100,102,104],{"version":15,"cve_count":11,"kev_count":11,"has_kev":16},"0.1.0",false,{"version":18,"cve_count":11,"kev_count":11,"has_kev":16},"0.10.0",{"version":20,"cve_count":11,"kev_count":11,"has_kev":16},"0.10.1",{"version":22,"cve_count":11,"kev_count":11,"has_kev":16},"0.11.0",{"version":24,"cve_count":11,"kev_count":11,"has_kev":16},"0.12.0",{"version":26,"cve_count":11,"kev_count":11,"has_kev":16},"0.13.0",{"version":28,"cve_count":11,"kev_count":11,"has_kev":16},"0.14.0",{"version":30,"cve_count":11,"kev_count":11,"has_kev":16},"0.2.0",{"version":32,"cve_count":11,"kev_count":11,"has_kev":16},"0.3.0",{"version":34,"cve_count":11,"kev_count":11,"has_kev":16},"0.4.0",{"version":36,"cve_count":11,"kev_count":11,"has_kev":16},"0.5.0",{"version":38,"cve_count":11,"kev_count":11,"has_kev":16},"0.6.0",{"version":40,"cve_count":11,"kev_count":11,"has_kev":16},"0.7.0",{"version":42,"cve_count":11,"kev_count":11,"has_kev":16},"0.8.0",{"version":44,"cve_count":11,"kev_count":11,"has_kev":16},"0.9.0",{"version":46,"cve_count":11,"kev_count":11,"has_kev":16},"1.0.0",{"version":48,"cve_count":11,"kev_count":11,"has_kev":16},"1.1.0",{"version":50,"cve_count":11,"kev_count":11,"has_kev":16},"1.1.1",{"version":52,"cve_count":11,"kev_count":11,"has_kev":16},"1.2.0",{"version":54,"cve_count":11,"kev_count":11,"has_kev":16},"1.3.0",{"version":56,"cve_count":11,"kev_count":11,"has_kev":16},"1.4.0",{"version":58,"cve_count":11,"kev_count":11,"has_kev":16},"1.5.0",{"version":60,"cve_count":11,"kev_count":11,"has_kev":16},"1.6.0",{"version":62,"cve_count":11,"kev_count":11,"has_kev":16},"1.7.0",{"version":64,"cve_count":11,"kev_count":11,"has_kev":16},"2.0.0",{"version":66,"cve_count":11,"kev_count":11,"has_kev":16},"2.1.0",{"version":68,"cve_count":11,"kev_count":11,"has_kev":16},"2.10.0",{"version":70,"cve_count":11,"kev_count":11,"has_kev":16},"2.11.0",{"version":72,"cve_count":11,"kev_count":11,"has_kev":16},"2.12.0",{"version":74,"cve_count":11,"kev_count":11,"has_kev":16},"2.12.1",{"version":76,"cve_count":11,"kev_count":11,"has_kev":16},"2.13.0",{"version":78,"cve_count":11,"kev_count":11,"has_kev":16},"2.13.1",{"version":80,"cve_count":11,"kev_count":11,"has_kev":16},"2.13.2",{"version":82,"cve_count":83,"kev_count":11,"has_kev":16},"2.2.0",1,{"version":85,"cve_count":11,"kev_count":11,"has_kev":16},"2.3.0",{"version":87,"cve_count":11,"kev_count":11,"has_kev":16},"2.4.0",{"version":89,"cve_count":11,"kev_count":11,"has_kev":16},"2.5.0",{"version":91,"cve_count":11,"kev_count":11,"has_kev":16},"2.5.1",{"version":93,"cve_count":11,"kev_count":11,"has_kev":16},"2.6.0",{"version":95,"cve_count":11,"kev_count":11,"has_kev":16},"2.7.0",{"version":97,"cve_count":11,"kev_count":11,"has_kev":16},"2.8.0",{"version":99,"cve_count":11,"kev_count":11,"has_kev":16},"2.9.0",{"version":101,"cve_count":11,"kev_count":11,"has_kev":16},"2.9.1",{"version":103,"cve_count":11,"kev_count":11,"has_kev":16},"2.9.2",{"version":105,"cve_count":11,"kev_count":11,"has_kev":16},"2.9.3","Mina Sshd by Apache is a technology product with 45 tracked versions and 2 known security vulnerabilities. Get comprehensive security analysis, vulnerability tracking, and threat intelligence for this product.",[108,109,110,111,112,113,114,115,116,117,118,119,120,121,122,123,124,125,126,127,128,129,130,131,132,133,134,135,136,137,138,139,140,141,142,143,144,145,146,147,148,149,150,151,152],{"version":15,"cve_count":11,"kev_count":11,"has_kev":16},{"version":18,"cve_count":11,"kev_count":11,"has_kev":16},{"version":20,"cve_count":11,"kev_count":11,"has_kev":16},{"version":22,"cve_count":11,"kev_count":11,"has_kev":16},{"version":24,"cve_count":11,"kev_count":11,"has_kev":16},{"version":26,"cve_count":11,"kev_count":11,"has_kev":16},{"version":28,"cve_count":11,"kev_count":11,"has_kev":16},{"version":30,"cve_count":11,"kev_count":11,"has_kev":16},{"version":32,"cve_count":11,"kev_count":11,"has_kev":16},{"version":34,"cve_count":11,"kev_count":11,"has_kev":16},{"version":36,"cve_count":11,"kev_count":11,"has_kev":16},{"version":38,"cve_count":11,"kev_count":11,"has_kev":16},{"version":40,"cve_count":11,"kev_count":11,"has_kev":16},{"version":42,"cve_count":11,"kev_count":11,"has_kev":16},{"version":44,"cve_count":11,"kev_count":11,"has_kev":16},{"version":46,"cve_count":11,"kev_count":11,"has_kev":16},{"version":48,"cve_count":11,"kev_count":11,"has_kev":16},{"version":50,"cve_count":11,"kev_count":11,"has_kev":16},{"version":52,"cve_count":11,"kev_count":11,"has_kev":16},{"version":54,"cve_count":11,"kev_count":11,"has_kev":16},{"version":56,"cve_count":11,"kev_count":11,"has_kev":16},{"version":58,"cve_count":11,"kev_count":11,"has_kev":16},{"version":60,"cve_count":11,"kev_count":11,"has_kev":16},{"version":62,"cve_count":11,"kev_count":11,"has_kev":16},{"version":64,"cve_count":11,"kev_count":11,"has_kev":16},{"version":66,"cve_count":11,"kev_count":11,"has_kev":16},{"version":68,"cve_count":11,"kev_count":11,"has_kev":16},{"version":70,"cve_count":11,"kev_count":11,"has_kev":16},{"version":72,"cve_count":11,"kev_count":11,"has_kev":16},{"version":74,"cve_count":11,"kev_count":11,"has_kev":16},{"version":76,"cve_count":11,"kev_count":11,"has_kev":16},{"version":78,"cve_count":11,"kev_count":11,"has_kev":16},{"version":80,"cve_count":11,"kev_count":11,"has_kev":16},{"version":82,"cve_count":83,"kev_count":11,"has_kev":16},{"version":85,"cve_count":11,"kev_count":11,"has_kev":16},{"version":87,"cve_count":11,"kev_count":11,"has_kev":16},{"version":89,"cve_count":11,"kev_count":11,"has_kev":16},{"version":91,"cve_count":11,"kev_count":11,"has_kev":16},{"version":93,"cve_count":11,"kev_count":11,"has_kev":16},{"version":95,"cve_count":11,"kev_count":11,"has_kev":16},{"version":97,"cve_count":11,"kev_count":11,"has_kev":16},{"version":99,"cve_count":11,"kev_count":11,"has_kev":16},{"version":101,"cve_count":11,"kev_count":11,"has_kev":16},{"version":103,"cve_count":11,"kev_count":11,"has_kev":16},{"version":105,"cve_count":11,"kev_count":11,"has_kev":16},[154,162,169],{"cveId":155,"description":156,"publishedDate":157,"cvssScore":158,"cvssVersion":159,"severity":160,"isKev":16,"epssScore":161},"CVE-2019-6111","An issue was discovered in OpenSSH 7.9. Due to the scp implementation being derived from 1983 rcp, the server chooses which files\u002Fdirectories are sent to the client. However, the scp client only performs cursory validation of the object name returned (only directory traversal attacks are prevented). A malicious scp server (or Man-in-The-Middle attacker) can overwrite arbitrary files in the scp client target directory. If recursive operation (-r) is performed, the server can manipulate subdirectories as well (for example, to overwrite the .ssh\u002Fauthorized_keys file).","2019-01-31",5.9,"v3.1","Medium",0.58204,{"cveId":163,"description":164,"publishedDate":165,"cvssScore":166,"cvssVersion":159,"severity":167,"isKev":16,"epssScore":168},"CVE-2026-48827","Path traversal vulnerability in Apache MINA SSHD bundle sshd-git. Lack of path validation in git-upload-pack, git-receive-pack, and other git operations allows users authenticated over SSH access to git repositories outside the configured git server root directory.\n\n\n\n\nApplications are affected if they use org.apache.sshd:sshd-git. Applications not using sshd-git are not affected.\n\n\n\n\nUsers are advised to upgrade affected applications to Apche MINA SSHD 2.18.0, which fixes the issue.\n\n\n\n\nThe issue also is present in the pre-release milestones 3.0.0-M1 to 3.0.0-M3 for a new upcoming new major version 3.0.0. Again, applications are affected only if they use sshd-git. Upgrade affected applications to 3.0.0-M4.\n\n\n\n\nWe would like to point out that a professional git server should not rely solely on file system layout and permissions, but should implement additional security controls to govern access to git repositories and operations allowed on particular git repositories.","2026-06-01",7.1,"High",0.0078,{"cveId":170,"description":171,"publishedDate":12,"cvssScore":158,"cvssVersion":159,"severity":160,"isKev":16,"epssScore":172},"CVE-2024-41909","Like many other SSH implementations, Apache MINA SSHD suffered from the issue that is more widely known as CVE-2023-48795. An attacker that can intercept traffic between client and server could drop certain packets from the stream, potentially causing client and server to consequently end up with a connection for which \nsome security features have been downgraded or disabled, aka a Terrapin \nattack\n\nThe mitigations to prevent this type of attack were implemented in Apache MINA SSHD 2.12.0, both client and server side. Users are recommended to upgrade to at least this version. Note that both the client and the server implementation must have mitigations applied against this issue, otherwise the connection may still be affected.",0.00581,[],{"title":175,"metaDescription":176,"keywords":177,"structuredData":178},"Mina Sshd by Apache - Security Vulnerabilities & Analysis | Precursor Intelligence","Comprehensive security analysis for Mina Sshd by Apache covering 45 versions with 2 tracked vulnerabilities. Real-time threat intelligence, CVE tracking, and security recommendations.","Mina Sshd vulnerabilities, Mina Sshd security, Mina Sshd CVE, Apache Mina Sshd, Mina Sshd threat intelligence, Apache security, product security analysis, cybersecurity threats, vulnerability management, CVE tracking",{"@context":179,"@type":180,"name":181,"description":176,"url":182,"manufacturer":183,"applicationCategory":187,"softwareVersion":188,"mainEntity":189},"https:\u002F\u002Fschema.org","SoftwareApplication","Mina Sshd","https:\u002F\u002Fprecursorintelligence.com\u002Fvulnerabilities\u002Ftechnologies\u002Fvendors\u002Fapache\u002Fmina_sshd",{"@type":184,"name":185,"url":186},"Organization","Apache","https:\u002F\u002Fprecursorintelligence.com\u002Fvendors\u002Fapache","Security Software","45 versions tracked",{"@type":190,"name":191,"description":192,"vulnerabilityCount":10,"dateModified":12},"SecurityVulnerability","Mina Sshd Security Vulnerabilities","Security vulnerabilities affecting Mina Sshd by Apache",{"totalVersions":9,"totalVulnerabilities":10,"kevVulnerabilities":11,"lastUpdated":12,"generatedAt":194,"apiVersion":195},"2026-10-17T15:07:05.275Z","3.0",{"rows":197,"total":11,"capped":16,"failed":11},[],[]]