ssh in OpenSSH before 10.4 can have a use-after-free when a server changes its host key during a key re-exchange. (This outcome occurs only on the client side.)

The publication date reported by the vendor.

The vendor changed the advisory after it was first published.

We collected the advisory from the official source.

Our collector saw this advisory during a later source check.