Vulnerabilities

TI-2026-32313 CVE-2026-44347

Warpgate: SSO CSRF -- State Token Not Validated on Return

MEDIUM 62

Warpgate is an open source SSH, HTTPS and MySQL bastion host for Linux.

CVSS 3.1MEDIUM 6.5 Network No auth User interaction EPSS 0.00133 Published 2026-05-12 Fixed in 0.23.3 CWE-352

TI-2026-30510 CVE-2026-42189 · GHSA-f5v4-2wr6-hqmg

HIGH 72

Russh is a Rust SSH client & server library.

CVSS 3.1HIGH 7.5 Network No auth No interaction EPSS 0.00481 Published 2026-05-08 Fixed in 0.60.1 CWE-770

TI-2025-34558 CVE-2025-54804 · GHSA-h5rc-j5f5-3gcm

MEDIUM 62

Russh is a Rust SSH client & server library.

CVSS 3.1MEDIUM 6.5 Network Low privileges No interaction EPSS 0.0045 Published 2025-08-05 Partial fix · 0.54.1 CWE-190

TI-2024-29059 CVE-2024-43410 · GHSA-vgvv-x7xg-6cqg

HIGH 72

Russh is a Rust SSH client & server library.

CVSS 3.1HIGH 7.5 Network No auth No interaction EPSS 0.00912 Published 2024-08-21 Fixed in 0.44.1 CWE-770

TI-2023-26551 CVE-2023-48712

LOW 39

Warpgate is an open source SSH, HTTPS and MySQL bastion host for Linux.

CVSS 3.1HIGH 8.8 Network Low privileges No interaction EPSS 0.00676 Published 2023-11-24 Fixed in 0.9.0 CWE-863

TI-2023-23385 CVE-2023-43660

LOW 35

Warpgate is a smart SSH, HTTPS and MySQL bastion host for Linux that doesn't need special client apps.

CVSS 3.1HIGH 8.1 Network No auth No interaction EPSS 0.00302 Published 2023-09-27 Fixed in 0.8.1 CWE-287

TI-2023-18898 CVE-2023-37268

HIGH 73

Warpgate is an SSH, HTTPS and MySQL bastion host for Linux that doesn't need special client apps.

CVSS 3.1HIGH 8.8 Network Low privileges No interaction EPSS 0.00546 Published 2023-07-14 Fixed in 0.7.3 CWE-287