Skip to contentRussh Project Russh vulnerabilities
- eugeny russh, warpgate project warpgate +1 moreRussh: Pre-auth DoS via unbounded allocation in keyboard-interactive authCVE-2026-42189Fix available7.5 High
- eugeny russh, warpgate project warpgate +1 moreRussh is missing an overflow check during channel windows adjustCVE-2025-54804Fix available6.5 Medium
- eugeny russh, warpgate project warpgate +1 moreRussh has an OOM Denial of Service due to allocation of untrusted amountCVE-2024-43410Fix available7.5 High
- 9bis kitty, apache sshd, sshj +68 more +70 morePrefix Truncation Attack against ChaCha20-Poly1305 and Encrypt-then-MAC aka TerrapinCVE-2023-48795Public exploitFix availableEPSS 93.5%5.9 Medium
- eugeny russhrussh may use insecure Diffie-Hellman keysCVE-2023-28113Fix available5.9 Medium