CVE-2026-116775

A flaw was found in pageant. A remote malicious server can trigger a Denial of Service DoS on a client system when SSH agent forwarding is bridged to a raw Pageant stream. By transmitting an excessively large frame length prefix, an attacker can force the client to buffer data without proper boun...

Infinite loop

Overview Affected versions of this package are vulnerable to Infinite loop through the preamble decode loop in DuplexFramingMiddleware and SingletonFramingMiddleware, with the same end-of-stream handling issue in RawStream.ReadAsyncInternal. An attacker can keep a server connection open...