https://patchthecve.com/CVEs with upgrade or downgrade fix stepshttps://patchthecve.com/cve/CVE-2021-36369.htmlhttps://patchthecve.com/cve/CVE-2021-36369.htmlWed, 17 Jun 2026 03:58:45 +0000HIGH 7.5: An issue was discovered in Dropbear through 2020.81. Due to a non-RFC-compliant check of the available authentication methods in the client-side SSH code, it is possible for an SSH server to change the login process in its favor. This attack can bypass additional security measures such as FIDO2 tokehttps://patchthecve.com/cve/CVE-2020-36254.htmlhttps://patchthecve.com/cve/CVE-2020-36254.htmlWed, 17 Jun 2026 03:15:13 +0000HIGH 8.1: scp.c in Dropbear before 2020.79 mishandles the filename of . or an empty filename, a related issue to CVE-2018-20685.https://patchthecve.com/cve/CVE-2019-12953.htmlhttps://patchthecve.com/cve/CVE-2019-12953.htmlWed, 17 Jun 2026 02:15:47 +0000MEDIUM 5.3: Dropbear 2011.54 through 2018.76 has an inconsistent failure delay that may lead to revealing valid usernames, a different issue than CVE-2018-15599.