CVE-2026-116775

The pageant library (versions 0.2.0 through 0.2.5 ) is vulnerable to a memory-exhaustion Denial of Service (DoS) due to unbounded frame buffering. The root cause is located in PageantStream::new within pageant/src/wmmessage.rs, which trusts a peer-controlled four-byte length prefix and buffers da...