Heads up: libSSH2 using applications are vulnerable to a critical exploit - sshd not affected

Hello, according to https://github.com/advisories/GHSA-R8MH-X5QV-7GG2 there is a critical security vulnerability. This, if exploited, can be used to gain access to your systems.

Affected version is 1.11.1 which was the latest release for almost two years.

sshd is not affected to the best of my knowledge. libSSH2 is used by tools that connect to a ssh service (not relevant here?) or provide a ssh service. Stuff like git web UIs, among others. Please be on the lookout for reports there.

In general: With the advent of LLM based security research do expect a bigger than usual amount of reported vulnerabilities in the future. Only expose what's really necessary if you don't want your hobby to turn into a second job.