| Package | Affected versions | Patched versions |
|---|---|---|
| openssh | ≥ 8.9, < 9.3 | 9.3 |
ssh-add in OpenSSH before 9.3 adds smartcard keys to ssh-agent without the intended per-hop destination constraints. The earliest affected version is 8.9.
Running one of these products? Scan your site to see whether it exposes a vulnerable version.
Scan my site free