[{"_1":2,"_138":-5,"_139":-5},"loaderData",{"_3":4,"_17":18,"_66":67,"_80":81},"root",{"_5":-5,"_6":-7,"_7":-5,"_8":9,"_10":-5,"_11":12,"_13":-7,"_14":-5,"_15":12,"_16":-7},"user","timezone","organizations","isWebsiteIndexable",true,"ddsFlags","enableDevTools",false,"clientIP","featureFlagsContext","enableRootLoaderRevalidation","incidentStatus","routes/_layout",{"_19":-7,"_20":-7,"_21":-5,"_22":12,"_23":12,"_24":12,"_25":12,"_26":12,"_27":9,"_28":-5,"_29":12,"_30":31,"_34":35,"_43":44,"_48":49,"_54":-5,"_55":-5,"_56":12,"_57":58,"_65":9},"activePathname","orgname","userRole","isExceededLimitModalDismissed","isPaymentRequired","hasAnalyzedImages","hasEverAnalyzedImages","hasImageAnalysisEnabled","hasViewedOnboardingStepper","maintenanceStatus","isInOnboarding","featureFlags",{"_32":12,"_33":12},"isInternalGuidesFlagEnabled","supportPortalEnabled","plan",{"_36":-5,"_37":-5,"_38":-5,"_39":-5,"_40":-5,"_41":12,"_42":-5},"displayName","isFree","isLegacy","tier","billingCycle","hasPendingBillingChanges","renewalDate","permissions",{"_45":12,"_46":12,"_47":12},"canReadBilling","canUpdateBilling","canManageRepos","userConfig",{"_50":-5,"_51":9,"_52":9,"_53":12},"howToGuidesProgress","hasViewedHowToGuides","hasViewedGuidedSetupTour","hasDismissedHowToGuidesCompletionAlert","guideIdToOpen","guidedSetup","hasOrgRecentlyBeenOnboarded","entitlements",{"_59":-5,"_60":-5,"_61":-5,"_62":-5,"_63":-5,"_64":12},"reposLimit","standardEnabledRepos","reposLeftOver","hasUnlimitedRepos","hasExceededRepoLimits","isDhiEnabled","hasOffloadProductAccess","routes/_layout.vulnerabilities.id.$id",{"_68":12,"_69":-5,"_70":12,"_71":72,"_73":74,"_75":76,"_79":-5},"isAuthenticated","orgName","isOverLimits","sourceName","debian","descriptionHtml","\n \n

sftp in OpenSSH before 10.4 does not properly constrain the location of downloaded files when \"sftp server:/path .\" is used with an attacker-controlled server.

openssh 1:10.4p1-1\nhttps://www.openssh.org/releasenotes.html#10.4p1

\n\n

\n ","cwes",[77],{"_71":72,"_75":78},[],"epss","routes/_layout.vulnerabilities.id.$id.(org).($orgname)._index",{"_82":-5,"_83":84,"_136":137},"highlightedSource","remainingSources",[85],{"_71":86,"_87":88,"_89":90,"_91":92,"_93":94,"_95":-5,"_96":-5,"_97":-5,"_98":-5,"_99":-5,"_100":-5,"_101":102,"_75":103,"_104":105,"_128":129,"_130":131,"_132":133,"_134":135},"Debian","sourceUrl","https://security-tracker.debian.org/tracker/CVE-2026-59995","sourceId","CVE-2026-59995","createdAt","2026-07-08T09:23:11.289Z","updatedAt","2026-07-08T09:32:23.575Z","cvssScore","cvssVector","cvssSeverity","cvssVersion","parsedVector","exploitabilityScore","exploits",[],[],"packages",[106,118,120,124,126],{"_107":108,"_109":110,"_111":72,"_112":113,"_114":115,"_116":-5,"_117":12},"fullName","debian/openssh","type","deb","osName","osVersion","14","affectedRange",">0","fixVersion","isHighlighted",{"_107":108,"_109":110,"_111":72,"_112":119,"_114":115,"_116":-5,"_117":12},"13",{"_107":108,"_109":110,"_111":72,"_112":121,"_114":122,"_116":123,"_117":12},"unstable","<1:10.4p1-1","1:10.4p1-1",{"_107":108,"_109":110,"_111":72,"_112":125,"_114":115,"_116":-5,"_117":12},"12",{"_107":108,"_109":110,"_111":72,"_112":127,"_114":115,"_116":-5,"_117":12},"11","advisories",[88],"patches",[],"commits",[],"info",[],"now",1783512451856,"actionData","errors"]

CVE-2026-59995

Summary

Common Weakness Enumeration (CWE)

Advisories

Debian