The double-free vulnerability CVE-2023-25136 was introduced in July 2022 and was reported in January 2023. JFrog Security Research team published a detailed analysis for the vulnerability. Qualys Threat Research Unit created a demonstration of the vulnerability with the technical details published on seclists. While the double-free vulnerability in OpenSSH version 9.1 may raise concerns, it is essential to note that exploiting this issue is no simple task
