Russh: Configured server auth-attempt cap is not enforced in the USERAUTH_REQUEST runtime path
CVE-2026-102825
Russh is a Rust SSH client and server library. Prior to 0.62.6, the USERAUTH_REQUEST path reached from server::run_strea
#advisory
共收录 23212 条相关情报。
← 返回所有主题Russh: Missing X25519 zero-point validation in hybrid ML-KEM key exchange
CVE-2026-102824
Russh is a Rust SSH client and server library. Prior to 0.63.0, the hybrid ML-KEM 768 and X25519 implementation in russh
russh: Client-side channel-scoped Handler callbacks fire for channel IDs the client never opened
CVE-2026-102823
Russh is a Rust SSH client and server library. Prior to 0.63.1, client_read_authenticated in russh/src/client/encrypted.
adm-zip: Decompression-bomb protection (fix for CVE-2026-39244) can be bypassed by declaring uncompressed size as 0
**Affected package:** adm-zip (npm) **Affected version:** 0.6.0 ## Summary The fix shipped for CVE-2026-39244 (`method
adm-zip extraction preserves SUID/SGID bits from untrusted ZIPs -> local privilege escalation
CVE-2026-102282
## Summary adm-zip applies the Unix permission bits stored in a zip entry directly to the extracted file via `fs.chmodS
Laravel: XSS in Debug Page Information
CVE-2026-102279
### Impact When `APP_DEBUG=true`, attacker-controlled input is passed to a Tippy.js tooltip configured with `allowHTML:
Nodemailer: Nested structured recipient arrays bypass the parser depth limit and cause stack exhaustion DoS
## Submission metadata | Field | Value | |---|---| | Ecosystem | npm | | Package | `nodemailer` | | Repository | https:
russh: negotiating a MAC-requiring block cipher (CTR/CBC) with mac=none causes a slice-index-out-of-range panic
CVE-2026-102822
Russh is a Rust SSH client and server library. Prior to 0.63.1, a connection configured to permit mac=none can negotiate
Russh: Unbounded memory exhaustion via CHANNEL_OPEN flood during a client-stalled rekey
CVE-2026-102821
Russh is a Rust SSH client and server library. Prior to 0.63.2, an authenticated remote peer can send SSH_MSG_KEXINIT wi
pageant: Out-of-bounds read / oversized allocation in `pageant` MemoryMap::read via a malicious Pageant agent (Windows)
CVE-2026-102820
pageant provides a [PageantStream] type that implements [AsyncRead] and [AsyncWrite] traits and can be used to talk to a
CVE-2026-102729
CVE-2026-102729
`gx_binres_theme_load()` sizes its theme buffer for the theme it was asked for, and allocates it even when the resource
CVE-2026-102727
CVE-2026-102727
FTP Passive Data Connection Not Bound to the Authenticated Control Peer
MobilityDB through 1.3.0 Out-of-bounds Read DoS via WKB Deserialization
CVE-2026-102639
MobilityDB version 1.3.0 and earlier contains an out-of-bounds read vulnerability in the MEOS binary and library WKB des
CVE-2026-102728
CVE-2026-102728
Two client-side TLS/DTLS handshake parsers in NetX Secure read fields from a server-supplied message before validating t
CVE-2026-102726
CVE-2026-102726
Unbounded PPP IPCP Option Parsing Causes a Worker Stall and Out-of-bounds Read
CVE-2026-102725
CVE-2026-102725
Out-of-bounds Read from Unvalidated MSRP Attribute List Length
CVE-2026-102724
CVE-2026-102724
NULL Pointer Dereference When Evicting the Sole MSRP Attribute
CVE-2026-102723
CVE-2026-102723
NULL Pointer Dereference on MSRP Attribute Table Exhaustion
CVE-2026-102722
CVE-2026-102722
In the IPv4 PASV path, the FTP Client accepts whatever address was sent in the server's `227` reply. Validation only cov
Path Traversal via Symlink Following in allowedLocalRoots in MCP Toolbox for Databases
CVE-2026-102242
Improper link resolution (CWE-59 / CWE-22) in the allowedLocalRoots path validation in Google MCP Toolbox for Databases