Issues

• Hybrid KEX shared_secret stack array never wiped in kex_mlkem768x25519_sha256() (CWE-226)

  libssh2/libssh2#2654 · opened on Oct 5, 2026

• k_value (raw DH/ECDH shared secret) freed without wipe in KEX state cleanup (CWE-226)

  libssh2/libssh2#2653 · opened on Oct 5, 2026

• libssh2_sftp_symlink: wrong order of arguments

  libssh2/libssh2#2597 · opened on Sep 7, 2026
  2

• libssh2_channel_read_ex keeps returning LIBSSH2_ERROR_EAGAIN for huge output

  libssh2/libssh2#2533 · opened on Aug 23, 2026

• AEAD ciphers (chacha20-poly1305, AES-GCM) leak 16 bytes of uninitialized memory per outgoing encrypted packet

  libssh2/libssh2#2023 · opened on Jun 10, 2026
  5

• Request for release (v1.11.2) to address CVE-2026-7598(integer overflow)

  libssh2/libssh2#1925 · opened on May 8, 2026
  13

• To avoid interfering with auth, send keepalives at the end of the interval instead of the beginning

  libssh2/libssh2#1810 · opened on Mar 1, 2026
  1

• The write stucks at the transport layer.

  libssh2/libssh2#1672 · opened on Sep 22, 2025
  2

• libssh2_userauth methods always indicate error when additional auth steps are required by server

  libssh2/libssh2#1612 · opened on Jun 18, 2025
  6

• Maximum load of libssh2 data transmission

  libssh2/libssh2#1490 · opened on Nov 7, 2024
  1

• libssh2_session_handshake LIBSSH2_ERROR_KEY_EXCHANGE_FAILURE

  libssh2/libssh2#1370 · opened on Apr 16, 2024
  6

• SFTP failed with the error -41 working with Openssl

  libssh2/libssh2#1356 · opened on Apr 7, 2024
  14

• ssh from docker container on arm64 macos ventura to same mac (docker host) fails, ERROR: SSH handshake failed.

  libssh2/libssh2#1313 · opened on Jan 23, 2024
  1

• Feature request: Copying a file on SFTP to another directory without roundtrip

  libssh2/libssh2#1265 · opened on Dec 3, 2023
  5

• Channel cannot be closed or freed early while executing a long running command

  libssh2/libssh2#1218 · opened on Nov 12, 2023
  1

• The loaded known hosts shouldn't be tied to a session

  libssh2/libssh2#1193 · opened on Sep 29, 2023

• libssh2_channel_close() can lead to deadlock on MacOS

  libssh2/libssh2#1188 · opened on Sep 21, 2023

• Read fails when using large buffers (starting from around 4GB)

  libssh2/libssh2#1182 · opened on Sep 4, 2023
  3

• autotools: generated libssh2.pc file broken

  libssh2/libssh2#1113 · opened on Jul 9, 2023
  1

• libssh2_userauth_keyboard_interactive_ex callback and memory allocation

  libssh2/libssh2#1078 · opened on Jun 1, 2023
  3

• sntrup761x25519-sha512

  libssh2/libssh2#1040 · opened on May 15, 2023
  3

• Window adjustment during channel read operation

  libssh2/libssh2#792 · opened on Jan 27, 2023
  1

• libssh2_sftp_stat_ex() uses "long" for times

  libssh2/libssh2#735 · opened on Aug 16, 2022

• Implement authentication method gssapi-with-mic

  libssh2/libssh2#707 · opened on Jun 10, 2022
  3

• libssh2_sftp_close_handle and LIBSSH2_ERROR_EAGAIN

  libssh2/libssh2#690 · opened on Apr 8, 2022
  5