Skip to content
Russh Project vulnerabilities
Newest
-
eugeny russh, warpgate project warpgate +1 more
Russh: Pre-auth DoS via unbounded allocation in keyboard-interactive auth
CVE-2026-42189
Fix available
7.5 High
-
eugeny russh, warpgate project warpgate +1 more
Russh is missing an overflow check during channel windows adjust
CVE-2025-54804
Fix available
6.5 Medium
-
eugeny russh, warpgate project warpgate +1 more
Russh has an OOM Denial of Service due to allocation of untrusted amount
CVE-2024-43410
Fix available
7.5 High
-
9bis kitty, apache sshd, sshj +68 more +70 more
Prefix Truncation Attack against ChaCha20-Poly1305 and Encrypt-then-MAC aka Terrapin
CVE-2023-48795
Public exploitFix available
EPSS 93.5%
5.9 Medium
-
eugeny russh
russh may use insecure Diffie-Hellman keys
CVE-2023-28113
Fix available
5.9 Medium