Junglewise Threat Intelligence

CVE-2026-54697: ConnectBot SSH Client Library: Excessive allocation and integer overflow in DER private-key parsing

CVE-2026-54697 · Severity: medium · CVSS 4 · Published 2026-06-12

Vendors: Maven.

Executive brief

ConnectBot SSH Client Library: Excessive allocation and integer overflow in DER private-key parsing

Affected products

Maven org.connectbot.sshlib:sshlib

Related threats

ConnectBot SSH Client Library integer overflow in DER private-key parsing
ConnectBot SSH Client Library excessive memory allocation in SSH parser
ConnectBot SSH Client Library: Unbounded SSH field lengths can cause excessive memory allocation