TI-2026-30510 CVE-2026-42189 · GHSA-f5v4-2wr6-hqmg
Russh: Pre-auth DoS via unbounded allocation in keyboard-interactive auth
Priority HIGH 72
Russh is a Rust SSH client & server library.
Vulnerabilities
5 records
TI-2025-34558 CVE-2025-54804 · GHSA-h5rc-j5f5-3gcm
Russh is missing an overflow check during channel windows adjust
Priority MEDIUM 62
Russh is a Rust SSH client & server library.
TI-2024-29059 CVE-2024-43410 · GHSA-vgvv-x7xg-6cqg
Russh has an OOM Denial of Service due to allocation of untrusted amount
Priority HIGH 72
Russh is a Rust SSH client & server library.
TI-2023-26623 CVE-2023-48795 · GHSA-45x7-px36-x8w8
The SSH transport protocol with certain OpenSSH extensions, found in OpenSSH before 9.6…
Priority HIGH 70
The SSH transport protocol with certain OpenSSH extensions, found in OpenSSH before 9.6 and other products, allows remote attackers to bypass integrity checks such that some packets are omitted (from the extension negoti…
TI-2023-12692 CVE-2023-28113 · GHSA-cqvm-j2r2-hwpg
russh may use insecure Diffie-Hellman keys
Priority LOW 27
russh is a Rust SSH client and server library.