Nadav0077 600be0de54 Reject unsafe server-supplied names in SCP recursive download ...

A malicious or compromised SCP server could return file or directory names containing
path separators, drive qualifiers, or parent-directory references.
ScpClient.Download(string, DirectoryInfo) combined these into a local path without
validation, allowing writes outside the destination directory. Server-supplied C and D
record names are now validated before being combined into a local path.

Signed-off-by: Nadav0077 <18245584+Nadav0077@users.noreply.github.com>

2026-08-09 18:32:00 +02:00

..

References

Update ScpClient to work with revent versions of OpenSSH (#625)

2020-02-15 21:06:10 +01:00

Renci.SshNet

Reject unsafe server-supplied names in SCP recursive download

2026-08-09 18:32:00 +02:00

exclusion.dic

Fixes spelling errors (#1668)

2025-07-12 21:01:57 +02:00