Please report vunerabilities using GitHub's Private Vulnerability Reporting tool.
You can expect a response within a few days.
Security: Eugeny/russh
Security
SECURITY.md
-
OOM Denial of Service due to allocation of untrusted amountGHSA-vgvv-x7xg-6cqg published
Aug 14, 2024 by EugenyHigh -
Prefix Truncation Attack (a.k.a. Terrapin Attack) against ChaCha20-Poly1305 and Encrypt-then-MACGHSA-45x7-px36-x8w8 published
Dec 18, 2023 by EugenyModerate -
russh may use insecure Diffie-Hellman keysGHSA-cqvm-j2r2-hwpg published
Mar 16, 2023 by EugenyModerate
Learn more about advisories related to Eugeny/russh in the GitHub Advisory Database