Ecosystem	Package	Version

Vulnerabilities

CVE-2025-61985

CVE-2025-61985

ssh in OpenSSH before 10.1 allows the '\0' character in an ssh:// URI, potentially leading to code execution when a ProxyCommand is used.

Published Nov 4, 2025

https://access.redhat.com/security/cve/cve-2025-61985

CVSS ScoreLow

3.6

Ecosystem	Package	Version


cargo	openssh	0.1.0
cargo	openssh	0.1.1
cargo	openssh	0.1.2
cargo	openssh	0.1.3
cargo	openssh	0.1.4
cargo	openssh	0.10.0
cargo	openssh	0.10.1
cargo	openssh	0.10.2
cargo	openssh	0.10.3
cargo	openssh	0.10.4
cargo	openssh	0.10.5
cargo	openssh	0.10.6
cargo	openssh	0.11.0
cargo	openssh	0.11.1
cargo	openssh	0.11.2
cargo	openssh	0.11.3
cargo	openssh	0.11.4
cargo	openssh	0.11.5
cargo	openssh	0.11.6
cargo	openssh	0.2.0
cargo	openssh	0.2.1
cargo	openssh	0.3.0
cargo	openssh	0.3.1
cargo	openssh	0.4.0
cargo	openssh	0.4.1
cargo	openssh	0.4.2
cargo	openssh	0.4.3
cargo	openssh	0.5.0
cargo	openssh	0.5.1
cargo	openssh	0.5.2
cargo	openssh	0.6.0
cargo	openssh	0.6.1
cargo	openssh	0.6.2
cargo	openssh	0.6.3
cargo	openssh	0.7.0
cargo	openssh	0.8.0
cargo	openssh	0.8.1
cargo	openssh	0.9.0-rc.1
cargo	openssh	0.9.0-rc.2
cargo	openssh	0.9.0-rc.3
cargo	openssh	0.9.0-rc.4
cargo	openssh	0.9.0
cargo	openssh	0.9.1
cargo	openssh	0.9.2
cargo	openssh	0.9.3
cargo	openssh	0.9.4
cargo	openssh	0.9.5
cargo	openssh	0.9.6
cargo	openssh	0.9.7
cargo	openssh	0.9.8

CVE-2025-61985 | Components Impacted | Sonatype Guide | Sonatype Guide