CVE-2026-59996

ADVISORY - debian

Summary

scp in OpenSSH before 10.4 may place a file in the parent directory of an intended directory when the copy occurs between two remote destinations.

openssh 1:10.4p1-1 [trixie] - openssh (Minor issue) [bookworm] - openssh (Minor issue) [bullseye] - openssh (Minor issue) https://www.openssh.org/releasenotes.html#10.4p1

EPSS Score⁠: 0.0025 (0.161)

See which of your images are affected by this CVE and how to fix them by signing into Docker Scout.