pageant vulnerabilities (crates.io)

2 vulnerabilities.

• pageant crates.io pageant: unbounded frame buffering on peer-controlled 4-byte length prefix (memory-exhaustion DoS) CVE-2026-116775 Fix available 2.3 LowOctober 27, 2026
• pageant crates.io pageant: Out-of-bounds read / oversized allocation in `pageant` MemoryMap::read via a malicious Pageant agent (Windows) CVE-2026-102820 Fix available 6.2 MediumSeptember 29, 2026