{"id":"GO-2026-6792","revision":"8b68898005154fbb910ca62b4e3c10ae","records":[{"revision":"8b68898005154fbb910ca62b4e3c10ae","observedAt":"2026-10-24T13:19:41.952+00:00","statement":{"source":"osv","id":"GO-2026-6792","aliases":["CVE-2026-77375","GHSA-q7pc-356p-hggc"],"title":"SFTPGo: Denial of service via malformed SSH channel request in github.com/drakkan/sftpgo","description":"SFTPGo: Denial of service via malformed SSH channel request in github.com/drakkan/sftpgo","state":0,"publishedAt":"2026-10-19T21:08:35+00:00","modifiedAt":"2026-10-19T21:31:37.9034637+00:00","affected":[{"ecosystem":"Go","name":"github.com/drakkan/sftpgo","ranges":[{"type":"SEMVER","events":[{"kind":"introduced","version":"0"}]}],"versions":[],"rawVersionEvidence":null},{"ecosystem":"Go","name":"github.com/drakkan/sftpgo/v2","ranges":[{"type":"SEMVER","events":[{"kind":"introduced","version":"0"},{"kind":"fixed","version":"2.7.5"}]}],"versions":[],"rawVersionEvidence":null}],"metrics":[],"references":["https://github.com/drakkan/sftpgo/security/advisories/GHSA-q7pc-356p-hggc","https://nvd.nist.gov/vuln/detail/CVE-2026-77375","https://github.com/drakkan/sftpgo/commit/4f751232d7025cf2f7360e01ee8dca81e74b48b0","https://github.com/drakkan/sftpgo/releases/tag/v2.7.5"],"sourceUrl":"https://osv.dev/vulnerability/GO-2026-6792","license":"OSV · upstream source license applies","key":"osv:GO-2026-6792","identifiers":["GO-2026-6792","CVE-2026-77375","GHSA-q7pc-356p-hggc"]},"retained":false,"historicalAffected":[]}],"coverage":[]}