Threats tagged 'ghsa-fvwj-j79q-57v7'

A vulnerability in libssh allows a malicious username expanded through %r in ProxyCommand handling to inject shell metacharacters. This can expose environment variables and cause unintended shell behavior. The flaw has a low CVSS score of 3.9 and requires local access with low privileges and user interaction. Red Hat has issued an update for Red Hat Hardened Images RPMs to address this issue.