All issues

Search results

[Security] Malicious SFTP server / HTTP proxy OOM the client: FXP_DATA declared length drives new byte[foo]; ProxyHTTP status line appends unbounded (both verified)

Status: Open.

#1133 In mwiede/jsch;

· afldl opened on Aug 25, 2026

Support XDH with Java 8 (from H2 2027)

Status: Open.

#1116 In mwiede/jsch;

· beth-soptim opened on Aug 10, 2026

Support ML-KEM with Java 21 and 17 (from 10/2026 patch day) and Java 11 and 8 (H2 2027)

Status: Open.

#1115 In mwiede/jsch;

· beth-soptim opened on Aug 10, 2026

Support wildcard principal names in SSH host certificates

Status: Open.

#1107 In mwiede/jsch;

· tc-tlv opened on Aug 5, 2026

KBI MaxAuthTries Bypass Hang

Status: Open.

#1090 In mwiede/jsch;

· August829 opened on Jul 21, 2026

JSch SSH2 Client Accepts Attacker-Controlled Non-Prime Diffie-Hellman Group in group-exchange KEX

Status: Open.

#1089 In mwiede/jsch;

· August829 opened on Jul 21, 2026

Decrypting PuTTY keys protected by passphrase with umlauts fails

Status: Open.

#1037 In mwiede/jsch;

· beth-soptim opened on Apr 17, 2026

com.jcraft.jsch.JSchException: Packet corrupt

Status: Open.

#1032 In mwiede/jsch;

· cdprete opened on Apr 10, 2026

It's not an issue, but a question

Status: Open.

#973 In mwiede/jsch;

· skadoic1 opened on Dec 26, 2025

Help Needed

Status: Open.

#941 In mwiede/jsch;

· Macheraci opened on Nov 6, 2025

JSCH compression - result in Unknown SSH message type 0 when using zlib@openssh.com

Status: Open.

#928 In mwiede/jsch;

· ihudedi opened on Oct 22, 2025

automatic rekeying

Status: Open.

#917 In mwiede/jsch;

· ybudweiser opened on Oct 3, 2025