Junglewise Threat Intelligence

CVE-2022-29245: Weak private key generation in SSH.NET

CVE-2022-29245 · Severity: low · CVSS 3.1 · Published 2022-06-01

Technologies: SSH.NET (NuGet). Vendors: NuGet.

Executive brief

Weak private key generation in SSH.NET

Affected products

NuGet SSH.NET

Related threats

SSH.NET is a Secure Shell (SSH) library for .NET. Prior to 2026.0.0, ScpClient places caller-supplied remote paths into the command used to
SSH.NET is a Secure Shell (SSH) library for .NET. In 2025.1.0 and earlier, ScpClient.Download(string directoryName, DirectoryInfo directoryI