Red Hat Security Advisory: openssh security update
openssh: scp allows command injection when using backtick characters in the destination argument
cpe:/a:redhat:enterprise_linux:8::appstream cpe:/o:redhat:enterprise_linux:8::baseos