{"action":"Upgrade com.jcraft:jsch to 0.1.54 or later.","affected":[{"fixed":"0.1.54","introduced":"0"}],"component":"com.jcraft:jsch","cve_ids":["CVE-2016-5725"],"ecosystem":"Maven","epss":0.24143,"exploited":false,"fixed_versions":["0.1.54"],"ghsa_id":"GHSA-q446-82vq-w674","id":"tcs_01M5N98JPTA2RWXXBM0J2GH9MZ","modified_at":"2026-09-10T03:49:36.585091816Z","published_at":"2022-05-13T01:09:33Z","references":["https://osv.dev/vulnerability/GHSA-q446-82vq-w674","https://nvd.nist.gov/vuln/detail/CVE-2016-5725","https://access.redhat.com/errata/RHSA-2017:3115","https://github.com/tintinweb/pub/tree/master/pocs/cve-2016-5725","https://lists.debian.org/debian-lts-announce/2020/04/msg00017.html","https://www.exploit-db.com/exploits/40411","https://www.oracle.com/security-alerts/cpuApr2021.html","https://www.oracle.com/security-alerts/cpujan2021.html","https://www.oracle.com/security-alerts/cpuoct2020.html","http://packetstormsecurity.com/files/138809/jsch-0.1.53-Path-Traversal.html","http://seclists.org/fulldisclosure/2016/Sep/53","http://www.jcraft.com/jsch/ChangeLog"],"severity":{"label":"medium","score":5.9},"sources":[{"source":"osv","source_id":"GHSA-q446-82vq-w674","url":"https://osv.dev/vulnerability/GHSA-q446-82vq-w674"}],"summary":"Improper Limitation of a Pathname to a Restricted Directory in JCraft JSch"}