{"action":"Upgrade libssh2 to 1.11.1-r2 or later.","affected":[{"fixed":"1.11.1-r2","introduced":"0"}],"component":"libssh2","cve_ids":[],"ecosystem":"Alpine","ecosystem_qualifier":"Alpine:v3.24","exploited":false,"fixed_versions":["1.11.1-r2"],"id":"tcs_01M5NFZVB7JJ6NN3R6JRF2XKC2","modified_at":"2026-10-01T02:17:49.406032795Z","published_at":"2026-05-01T22:16:16.947Z","references":["https://osv.dev/vulnerability/ALPINE-CVE-2026-7598","https://security.alpinelinux.org/vuln/CVE-2026-7598"],"severity":{"label":"unknown"},"sources":[{"source":"osv","source_id":"ALPINE-CVE-2026-7598#Alpine:v3.24/libssh2","url":"https://osv.dev/vulnerability/ALPINE-CVE-2026-7598"}],"summary":"A security vulnerability has been detected in libssh2 up to 1.11.1. The impacted element is the function userauth_password of the file src/userauth.c. Such manipulation of the argument username_len/pa"}