Eugeny russh

6 known vulnerabilities in Eugeny russh, with patch priority, exploit likelihood and the news covering them.

Latest vulnerabilities

  • CVE-2026-102825 CVSS 3.7 low Russh is a Rust SSH client and server library. Prior to 0.62.6, the USERAUTH_REQUEST path reached from server::run_stream in…
  • CVE-2026-102824 CVSS 4.3 medium Russh is a Rust SSH client and server library. Prior to 0.63.0, the hybrid ML-KEM 768 and X25519 implementation in…
  • CVE-2026-102823 CVSS 7.5 high Russh is a Rust SSH client and server library. Prior to 0.63.1, client_read_authenticated in russh/src/client/encrypted.rs forwards…
  • CVE-2026-102822 CVSS 3.7 low Russh is a Rust SSH client and server library. Prior to 0.63.1, a connection configured to permit mac=none can negotiate it with a…
  • CVE-2026-102821 CVSS 6.5 medium Russh is a Rust SSH client and server library. Prior to 0.63.2, an authenticated remote peer can send SSH_MSG_KEXINIT without the required…
  • CVE-2026-102820 CVSS 6.2 medium pageant provides a [PageantStream] type that implements [AsyncRead] and [AsyncWrite] traits and can be used to talk to a running Pageant…