In ssh in OpenSSH before 10.6, a $ or \ character can occur in a command-line username, leading to injection.
Loading application…