[ Vendor · 7 CVEs ]
Eugeny
CVEs affecting Eugeny published in the last 30 days, plus any Eugeny CVE on CISA's exploited list.
| CVE | Published | Severity | Vulnerability | Signals |
|---|---|---|---|---|
| CVE-2026-111061 | 19 Oct 2026 | CVSS 4.3 | russh: Unbounded memory allocation in agent protocol server via crafted constraint recordsrussh is a Rust SSH client and server library that includes an SSH agent protocol implementation. Prior to 0.64.1, the agent server spawns a separate… | Fix |
| CVE-2026-102822 | 29 Sep 2026 | CVSS 3.7 | russh: negotiating a MAC-requiring block cipher (CTR/CBC) with mac=none causes a slice-index-out-of-range panicRussh is a Rust SSH client and server library. Prior to 0.63.1, a connection configured to permit mac=none can negotiate it with a MAC-requiring CTR… | Fix |
| CVE-2026-102823 | 29 Sep 2026 | CVSS 7.5 | russh: Client-side channel-scoped Handler callbacks fire for channel IDs the client never openedRussh is a Rust SSH client and server library. Prior to 0.63.1, client_read_authenticated in russh/src/client/encrypted.rs forwards CHANNEL_DATA… | Fix |
| CVE-2026-102824 | 29 Sep 2026 | CVSS 4.3 | Russh: Missing X25519 zero-point validation in hybrid ML-KEM key exchangeRussh is a Rust SSH client and server library. Prior to 0.63.0, the hybrid ML-KEM 768 and X25519 implementation in russh/src/kex/hybrid_mlkem.rs… | Fix |
| CVE-2026-102825 | 29 Sep 2026 | CVSS 3.7 | Russh: Configured server auth-attempt cap is not enforced in the USERAUTH_REQUEST runtime pathRussh is a Rust SSH client and server library. Prior to 0.62.6, the USERAUTH_REQUEST path reached from server::run_stream in… | Fix |
| CVE-2026-102820 | 29 Sep 2026 | CVSS 6.2 | pageant: Out-of-bounds read / oversized allocation in `pageant` MemoryMap::read via a malicious Pageant agent (Windows)pageant provides a [PageantStream] type that implements [AsyncRead] and [AsyncWrite] traits and can be used to talk to a running Pageant instance… | Fix |
| CVE-2026-102821 | 29 Sep 2026 | CVSS 6.5 | Russh: Unbounded memory exhaustion via CHANNEL_OPEN flood during a client-stalled rekeyRussh is a Rust SSH client and server library. Prior to 0.63.2, an authenticated remote peer can send SSH_MSG_KEXINIT without the required… | Fix |