CVE-2026-116775

The pageant library (versions 0.2.0 through 0.2.5 ) is vulnerable to a memory-exhaustion Denial of Service (DoS) due to unbounded frame buffering. The root cause is located in PageantStream::new within pageant/src/wmmessage.rs, which trusts a peer-controlled four-byte length prefix and buffers da...

CVE-2026-116774

The russh Rust SSH client and server library is vulnerable to a denial-of-service condition in versions 0.60.0 through 0.65.0 . The root cause is that channel-open parsing accepts a peer-declared maximum_packet_size of zero , which is then passed into ChannelTx::poll_writable in russh/src/channel...