{"schema":"sb.node.v1","id":"sb:e/cfe2b819a41d86b74a21f0bc","kind":"entity","label":{"text":"openssh","locale":"en"},"identity":{"anchor":"label:en:openssh","strength":"label"},"asOf":{"knowledgeCutoff":"2026-11-11T17:28:48.098358+00:00","releaseId":"sb-9723e5e6a34e","snapshot":"deploy 28537630ad149b132d593faa8fb6755cc8ff701e"},"lens":{"kind":"public"},"build":{"plane":"projected","builtFrom":["entity_graph.slim.json","entity_receipts (deploy asset)","event_graph.json","truth_records (deploy asset)","corroborated_record.json"],"rule":"node-projection.entity@v1"},"standing":{"evidence":{"supporting":27,"separatePublishers":13,"basis":"documents that mention the subject and the outlets that carried them; a mention is evidence the referent is in use, not evidence about any claim","receiptsOnTopic":{"state":"partial","share":0.444,"named":12,"of":27,"basis":"documents whose own title or summary lead names the subject, over every counted document that mentions it anywhere (the entity graph's measurement); receipts are drawn only from rows whose own title or URL names the subject (the entity graph's subject gate)","blind":["only 44% of the 27 documents measured name the subject in their own text; the rest mention it in passing, so standing.evidence.supporting overstates coverage about it"]}},"admission":{"state":"provisional","kind":"observed","kindBasis":"no-vocabulary-row","policy":"promotion (observed tier; not promoted)","reason":"seen recurring in the corpus and kept in the graph at the observation bar; not promoted into the vocabulary"},"disposition":{"state":"served","reason":"public record"},"validity":{"from":"2026-10-02","to":"2026-11-10","basis":"first and last day we saw it mentioned; not the subject's own lifetime"},"measurement":{"state":"partial","share":0,"blind":["0% of mentions say something specific about it; the rest only name it"]}},"dimensions":{"domains":["cybersecurity"],"activeDays":13,"assertions":{}},"up":[],"upNote":"An entity is a root: it is contained by nothing. Pan out by following R.","children":{"count":11,"byKind":{"observation":11},"items":[{"id":"sb:o/d3b156136bab9f1254a38338","kind":"observation","label":"Schneier on Security · 2026-11-10 · New OpenSSH Vulnerability","url":"https://www.schneier.com/blog/archives/2026/11/new-openssh-vulnerability.html","match":{"surface":"title","basis":"admitted by the entity graph's subject gate (title or URL); the headline names the subject as whole words (the door's on-topic test)"}},{"id":"sb:o/3d18c6a102b05b50eee14611","kind":"observation","label":"The Hacker News · 2026-11-10 · CISA Warns of Active Exploitation of OpenSSH, GPUStack, FreeSWITCH, and IBM Flaws","url":"https://thehackernews.com/2026/11/cisa-warns-of-active-exploitation-of.html","match":{"surface":"title","basis":"admitted by the entity graph's subject gate (title or URL); the headline names the subject as whole words (the door's on-topic test)"}},{"id":"sb:o/401b0c11671997c1f3b4ff2d","kind":"observation","label":"BleepingComputer · 2026-11-09 · Hackers exploit SSHole OpenSSH flaw to breach Linux systems","url":"https://www.bleepingcomputer.com/news/security/hackers-exploit-sshole-openssh-flaw-to-breach-linux-systems/","match":{"surface":"title","basis":"admitted by the entity graph's subject gate (title or URL); the headline names the subject as whole words (the door's on-topic test)"}},{"id":"sb:o/8d62ec85aa5a3a0351ef6323","kind":"observation","label":"SecurityWeek · 2026-11-09 · Hackers Exploiting ‘SSHole’ Authentication Bypass in OpenSSH","url":"https://www.securityweek.com/hackers-exploiting-sshole-authentication-bypass-in-openssh/","match":{"surface":"title","basis":"admitted by the entity graph's subject gate (title or URL); the headline names the subject as whole words (the door's on-topic test)"}},{"id":"sb:o/94c71f533800d3e20a540ced","kind":"observation","label":"SecurityWeek · 2026-11-06 · OpenSSH Rushes Patches for ‘SSHole’ Authentication Bypass","url":"https://www.securityweek.com/openssh-rushes-patches-for-sshole-authentication-bypass/","match":{"surface":"title","basis":"admitted by the entity graph's subject gate (title or URL); the headline names the subject as whole words (the door's on-topic test)"}},{"id":"sb:o/bc6898e6ee484ab338dbb854","kind":"observation","label":"The Hacker News · 2026-11-06 · Hackers Target OpenSSH SSHole Flaw Within Hours of Disclosure, Gain Root on Honeypot","url":"https://thehackernews.com/2026/11/hackers-exploited-openssh-sshole-flaw.html","match":{"surface":"title","basis":"admitted by the entity graph's subject gate (title or URL); the headline names the subject as whole words (the door's on-topic test)"}},{"id":"sb:o/cc09349873cfaebacdb376e1","kind":"observation","label":"crypto.news · 2026-11-06 · Binance founder CZ warns of critical 10-year-old OpenSSH flaw","url":"https://crypto.news/binance-cz-warns-critical-openssh-alpine-linux-flaw/","match":{"surface":"title","basis":"admitted by the entity graph's subject gate (title or URL); the headline names the subject as whole words (the door's on-topic test)"}},{"id":"sb:o/d00d07b12d0e688f652e8471","kind":"observation","label":"BleepingComputer · 2026-11-05 · OpenSSH flaw lets attackers log into password-disabled Linux accounts","url":"https://www.bleepingcomputer.com/news/security/openssh-flaw-lets-attackers-log-into-password-disabled-linux-accounts/","match":{"surface":"title","basis":"admitted by the entity graph's subject gate (title or URL); the headline names the subject as whole words (the door's on-topic test)"}},{"id":"sb:o/3a39ccfa4f22f9ca17438798","kind":"observation","label":"Rescana · 2026-11-05 · OpenSSH 10.6p2 Fixes Critical Password Bypass on Alpine and musl Linux: What to Do Now","url":"https://www.rescana.com/post/openssh-10-6p2-alpine-musl-password-auth-bypass-prepare-now","match":{"surface":"title","basis":"admitted by the entity graph's subject gate (title or URL); the headline names the subject as whole words (the door's on-topic test)"}},{"id":"sb:o/e2d08c86fac7755ee81ca388","kind":"observation","label":"Latest from Tom's Hardware · 2026-11-05 · Combined OpenSSH and musl-libc flaws let anyone into Alpine Linux and other distros by typing anything over 256 characters as a password","url":"https://www.tomshardware.com/tech-industry/cyber-security/combined-flaws-let-anyone-into-alpine-linux-and-other-distros-by-typing-anything-over-256-characters-as-a-password-emergency-fixes-for-openssh-and-musl-libc-issued-for-millions-of-systems-patch-immediately","match":{"surface":"title","basis":"admitted by the entity graph's subject gate (title or URL); the headline names the subject as whole words (the door's on-topic test)"}}],"cursor":"c1.eyJpZCI6InNiOmUvY2ZlMmI4MTlhNDFkODZiNzRhMjFmMGJjIiwibCI6ImNoaWxkcmVuIiwibyI6MTAsImsiOm51bGwsImEiOiIyMDI2LTExLTExVDE3OjI4OjQ4LjA5ODM1OCswMDowMCJ9","order":"newest first; we keep the 11 newest receipts for this entity whose own title or URL (the entity graph's subject gate) names it; each says which in match. Its other observations are counted in standing.evidence.supporting but are not addressable in v1"},"relations":{"count":3,"byKind":{"co-mentioned":3},"items":[{"kind":"relation","label":"co-mentioned with linux (17 documents)","role":"co-mentioned","relationKind":"co-mentioned","members":2,"id":"sb:r/3d566fad42a8915427f946ca"},{"kind":"relation","label":"co-mentioned with authentication bypass (10 documents)","role":"co-mentioned","relationKind":"co-mentioned","members":2,"id":"sb:r/4b5cbf2fc52cbbcacbbf17e7"},{"kind":"relation","label":"co-mentioned with cisa (8 documents)","role":"co-mentioned","relationKind":"co-mentioned","members":2,"id":"sb:r/96022648b4491e29ba7e6acc"}],"cursor":null,"order":"situations first, then claims (the subject's own maintained record, then site-wide corroborated clusters; each label ends with its standing), then co-mentions by shared documents, descending. Co-mentions are the ten strongest the entity graph keeps per entity"},"edge":{"state":"continues"},"links":{"rest":"/api/v1/node/e/cfe2b819a41d86b74a21f0bc","mcp":"traverse {\"id\":\"sb:e/cfe2b819a41d86b74a21f0bc\"}","page":"/entity/openssh/"},"limits":{"levelsPerCall":1,"pageSize":10,"maxPageSize":50,"membersMax":50,"statement":"One level per call: depth is 1 and only 1, and there is no whole-graph dump. pageSize 1-50 (default 10); a page limit is a cursor, never an edge. Members are listed up to 50. At most 60 traverse calls a minute per caller (runaway-loop protection, not a meter). One knowledge cutoff is served: the deploy's."},"actions":[{"verb":"unfold","lit":true,"effect":"read","layer":"free-record","call":"traverse {\"id\":\"sb:e/cfe2b819a41d86b74a21f0bc\",\"level\":\"children\"}"},{"verb":"fold","lit":true,"effect":"read","layer":"free-record","call":"traverse {\"id\":\"sb:e/cfe2b819a41d86b74a21f0bc\"}"},{"verb":"panOut","lit":false,"effect":"read","layer":"free-record","reason":"An entity is a root: it is contained by nothing. Pan out by following R."},{"verb":"follow","lit":true,"effect":"read","layer":"free-record","call":"traverse {\"id\":\"sb:e/cfe2b819a41d86b74a21f0bc\",\"level\":\"relations\"}"},{"verb":"receipts","lit":false,"effect":"read","layer":"free-record","reason":"receipts are the observations below this node; unfold to reach them"},{"verb":"edge","lit":true,"effect":"read","layer":"free-record","call":"traverse {\"id\":\"sb:e/cfe2b819a41d86b74a21f0bc\"}"},{"verb":"asOf","lit":false,"effect":"read","layer":"free-record","reason":"v1 serves one knowledge cutoff, this deploy's; walking an earlier cutoff needs retained history, which v1 does not keep"},{"verb":"switchObserver","lit":false,"effect":"read","layer":"free-record","reason":"the public record is the same for every observer; traversal through a Watch's lens is not served in v1"},{"verb":"readOriginal","lit":false,"effect":"read","layer":"free-record","reason":"no translation is applied on this node; every label is the source's own text"},{"verb":"save","lit":false,"effect":"watch-declaration","layer":"watch","reason":"saving applies to a configured Watch; configure one around this node first (free), then save it"},{"verb":"deliver","lit":false,"effect":"watch-declaration","layer":"watch","reason":"delivery applies to a saved Watch"},{"verb":"format","lit":false,"effect":"watch-declaration","layer":"watch","reason":"output format applies to a saved Watch"},{"verb":"deltaR","lit":false,"effect":"read","layer":"watch","reason":"Delta R needs a saved Watch with a previous reading"},{"verb":"read","lit":false,"effect":"read","layer":"one-time-read","reason":"one-time Reads are not offered through this door; use ask"}]}