mscdex/ssh2

Escaneado el 13 may 2026

Puntuación de riesgo/ 100

Riesgo crítico

Resumen

The ssh2 library contains 22 critical and 53 high-severity post-quantum cryptography vulnerabilities across 9 files. Core cryptographic protocols rely on quantum-vulnerable algorithms including RSA-2048, ECDSA, SHA-1 based key exchange, and legacy ciphers that will be broken by quantum computers. Immediate migration planning is required for regulatory compliance and long-term security.

Crítico

Alto

Medio

Bajo

Hallazgos principales

CríticoMD5
lib/protocol/constants.js:143
SHA3-256 or SHA-256
Evidencia
```
'hmac-md5-96',      // first 96 bits of HMAC-MD5
```

CríticoRSA key ≤ 2048 bits

test/test-keygen.js:31

Evidencia

{ args: ['rsa', { bits: 2048, comment: 'foobarbaz' }], sshType: 'ssh-rsa' },

CríticoNullCipher
test/test-protocol-crypto.js:54
Evidencia
```
cipher = new NullCipher(1, onCipherData);
```
CríticoSHA-1
lib/protocol/constants.js:132
SHA-256 or SHA3-256
Evidencia
```
'hmac-sha1-etm@openssh.com',
```
CríticoNullCipher
test/test-protocol-crypto.js:10
Evidencia
```
NullCipher,
```

+ 77 hallazgos más en el reporte completo

Escanea tu propio repositorio

Gratis. Resultados en ~90 segundos. CBOM + PDF DORA/NIS2 incluidos.

Iniciar un escaneo gratis