What’s Vulnerable › Products
Eugeny russh vulnerabilities
22 known vulnerabilities, 0 confirmed exploited in the wild (CISA KEV), 22 published in the last 12 months.
Check whether your Eugeny russh version is affected
Latest Eugeny russh vulnerabilities
- CVE-2026-116794 — russh: Agent server never calls `Agent::confirm`, so keys added with the confirm constraint (`ssh-add -c`) sign without confirmation (CVSS 8.3)
- CVE-2026-116775 — pageant: unbounded frame buffering on peer-controlled 4-byte length prefix (memory-exhaustion DoS) (CVSS 2.3)
- CVE-2026-116774 — russh: peer-declared zero maximum packet size permanently stalls channel writes (silent AsyncWrite hang) (CVSS 4.3)
- CVE-2026-116773 — russh's SSH client is susceptible to unbounded allocations via EXT_INFO packets (CVSS 4.3)
- CVE-2026-116696 — russh's SSH agent server is susceptible to unbound allocations via repeated SSH_AGENT_CONSTRAIN_CONFIRM messages (CVSS 3.3)
- CVE-2026-111061 — russh agent server converts constraint records into unbounded never-rolled-back tasks (CVSS 4.3)
- CVE-2026-102825 — Russh: Configured server auth-attempt cap is not enforced in the USERAUTH_REQUEST runtime path (CVSS 3.7)
- CVE-2026-102824 — Russh: Missing X25519 zero-point validation in hybrid ML-KEM key exchange (CVSS 4.3)
- CVE-2026-102823 — russh: Client-side channel-scoped Handler callbacks fire for channel IDs the client never opened (CVSS 7.5)
- CVE-2026-102822 — russh: negotiating a MAC-requiring block cipher (CTR/CBC) with mac=none causes a slice-index-out-of-range panic (CVSS 3.7)
- CVE-2026-102821 — Russh: Unbounded memory exhaustion via CHANNEL_OPEN flood during a client-stalled rekey (CVSS 6.5)
- CVE-2026-102820 — pageant: Out-of-bounds read / oversized allocation in `pageant` MemoryMap::read via a malicious Pageant agent (Windows) (CVSS 6.2)
- CVE-2026-73489 — Russh: Post-auth remote panic via pty-req with more than 130 terminal-mode records (CVSS 4.3)
- CVE-2026-73430 — Russh: Pre-auth remote panic via all-zero Curve25519 peer public value (encode_mpint OOB) (CVSS 5.3)
- CVE-2026-73429 — Russh: client wrong-length X25519 `clone_from_slice` panic (pre-auth DoS) (CVSS 5.3)
- CVE-2026-68930 — Russh: Channel-scoped server callbacks can be reached without an open channel (CVSS 6.5)
- CVE-2026-48110 — Russh: SSH message fields were decoded through allocation-first parsers before field-specific bounds (CVSS 7.5)
- CVE-2026-48108 — Russh: SSH identification parsing accepted non-canonical client banners and did not bound pre-banner input (CVSS 5.3)
- CVE-2026-48107 — Russh: Unchecked keyboard-interactive prompt count in client auth path (CVSS 6.5)
- CVE-2026-46705 — russh server userauth state is not reset when authentication principal changes (CVSS 5.3)
- CVE-2026-46702 — Russh: Post-decompression SSH packet size was not bounded, allowing remote oversized compressed packets (CVSS 7.5)
- CVE-2026-46673 — Russh: Unchecked CryptoVec allocation and growth handling is reachable from local agent inputs in current russh releases and from remote SSH traffic in historical pre-0.58.0 releases (CVSS 7.5)