Login Request a demo
RU
Product
russh
by Eugeny · last CVE Oct 28, 2026
25
CVEs
0
On KEV
8.3
Max CVSS
12
New 30D
Vulnerabilities25In the news0Timeline
Severity mix
Critical 0High 7Medium 14Low 4
Severity
All severities25Critical0High7Medium14Low4
Exploitation
On CISA KEV0Exploited in the wild0
Watch

Add russh to your stack to get only the CVEs that touch what you run.

CVECVSSEPSSPublishedSummary · affected versions
CVE-2026-102825
3.7
0%
Sep 29
Russh: Configured server auth-attempt cap is not enforced in the USERAUTH_REQUEST runtime path
Affected: < 0.62.6
CVE-2026-102822
3.7
0%
Sep 29
russh: negotiating a MAC-requiring block cipher (CTR/CBC) with mac=none causes a slice-index-out-of-range panic
Affected: < 0.63.1
CVE-2026-116696
New
3.3
0%
Oct 27
russh's SSH agent server is susceptible to unbound allocations via repeated SSH_AGENT_CONSTRAIN_CONFIRM messages
Affected: < 0.65.0
CVE-2026-116775
New
2.3
0%
Oct 27
pageant: unbounded frame buffering on peer-controlled 4-byte length prefix (memory-exhaustion DoS)
Affected: >= 0.2.0, < 0.2.5
Showing 4