[{"_1":2,"_82":-5,"_83":-5},"loaderData",{"_3":4,"_17":18,"_66":67,"_80":81},"root",{"_5":-5,"_6":-7,"_7":-5,"_8":9,"_10":-5,"_11":12,"_13":-7,"_14":-5,"_15":12,"_16":-7},"user","timezone","organizations","isWebsiteIndexable",true,"ddsFlags","enableDevTools",false,"clientIP","featureFlagsContext","enableRootLoaderRevalidation","incidentStatus","routes/_layout",{"_19":-7,"_20":-7,"_21":-5,"_22":12,"_23":12,"_24":12,"_25":12,"_26":12,"_27":9,"_28":-5,"_29":12,"_30":31,"_34":35,"_43":44,"_48":49,"_54":-5,"_55":-5,"_56":12,"_57":58,"_65":9},"activePathname","orgname","userRole","isExceededLimitModalDismissed","isPaymentRequired","hasAnalyzedImages","hasEverAnalyzedImages","hasImageAnalysisEnabled","hasViewedOnboardingStepper","maintenanceStatus","isInOnboarding","featureFlags",{"_32":12,"_33":12},"isInternalGuidesFlagEnabled","supportPortalEnabled","plan",{"_36":-5,"_37":-5,"_38":-5,"_39":-5,"_40":-5,"_41":12,"_42":-5},"displayName","isFree","isLegacy","tier","billingCycle","hasPendingBillingChanges","renewalDate","permissions",{"_45":12,"_46":12,"_47":12},"canReadBilling","canUpdateBilling","canManageRepos","userConfig",{"_50":-5,"_51":9,"_52":9,"_53":12},"howToGuidesProgress","hasViewedHowToGuides","hasViewedGuidedSetupTour","hasDismissedHowToGuidesCompletionAlert","guideIdToOpen","guidedSetup","hasOrgRecentlyBeenOnboarded","entitlements",{"_59":-5,"_60":-5,"_61":-5,"_62":-5,"_63":-5,"_64":12},"reposLimit","standardEnabledRepos","reposLeftOver","hasUnlimitedRepos","hasExceededRepoLimits","isDhiEnabled","hasOffloadProductAccess","routes/_layout.vulnerabilities.id.$id",{"_68":12,"_69":-5,"_70":12,"_71":72,"_73":74,"_75":76,"_79":-5},"isAuthenticated","orgName","isOverLimits","sourceName","debian","descriptionHtml","\n \n

sftp in OpenSSH before 10.4 does not properly constrain the location of downloaded files when \"sftp server:/path .\" is used with an attacker-controlled server.

openssh 1:10.4p1-1\nhttps://www.openssh.org/releasenotes.html#10.4p1

\n\n

\n ","cwes",[77],{"_71":72,"_75":78},[],"epss","routes/_layout.vulnerabilities.id.$id.my-images._index",{},"actionData","errors"]

CVE-2026-59995

Summary

Common Weakness Enumeration (CWE)

Impacted images

Sign in to Docker Scout