CVE-2026-3731: libssh SFTP Off-by-One Bug Exposes Supply Chain Vulnerabilities
A subtle off-by-one error in libssh's SFTP extension handling has been assigned CVE-2026-3731, triggering security releases across multiple platforms and exposing critical questions about API hygiene...