Red Hat Lightwell has released org.apache.sshd:sshd-git 2.19.0.rhlw-00003 with a backported security fix.
This patched artifact is a drop-in replacement for org.apache.sshd:sshd-git 2.19.0 from Maven Central.
{ "backport_base_version": "2.19.0", "remediated_version": "2.19.0.rhlw-00003", "repository_url": "https://packages.redhat.com/lightwell/java/remediated/" }
"https://github.com/project-lightwell/lightwell-osv/blob/main/advisories/RHLW-2026-9020b77e982da216.json"