Inefficient Regular Expression in mscdex ssh2 Can Cause Performance Issues

Monitor vulnerabilities like this one. Sign up free to get alerted when software you use is affected.

7.5

Inefficient Regular Expression in mscdex ssh2 Can Cause Performance Issues

CVE-2025-70034

Summary

The mscdex ssh2 version 1.17.0 has a regular expression that can slow down or even crash the system. This can happen when large amounts of data are being processed, potentially leading to performance issues or system crashes. An update to a newer version of the software is recommended to fix this issue.

Original title

An issue pertaining to CWE-1333: Inefficient Regular Expression Complexity (4.19) was discovered in mscdex ssh2 v1.17.0.

Original description

An issue pertaining to CWE-1333: Inefficient Regular Expression Complexity (4.19) was discovered in mscdex ssh2 v1.17.0.

Vulnerability type

CWE-1333 Inefficient Regular Expression Complexity (ReDoS)

https://gist.github.com/zcxlighthouse/78a0d9b7fcae20294076e8b24f763ce5
https://github.com/mscdex
https://github.com/mscdex/ssh2

Published: 9 Mar 2026 · Updated: 13 Mar 2026 · First seen: 9 Mar 2026