russh: Agent server never calls `Agent::confirm`, so keys added with the confirm constraint (`ssh-add -c`) sign without confirmation

CVE-2026-116794

### Summary The agent server in `russh::keys::agent::server` never calls `Agent::confirm` before signing with a key tha

来源摘录 · GitHub Advisory

pageant: unbounded frame buffering on peer-controlled 4-byte length prefix (memory-exhaustion DoS)

CVE-2026-116775

## Summary `pageant::PageantStream` reads a 4-byte big-endian length prefix from its input stream and buffers until `le

来源摘录 · GitHub Advisory

russh: peer-declared zero maximum packet size permanently stalls channel writes (silent AsyncWrite hang)

CVE-2026-116774

## Summary A peer can advertise `maximum packet size = 0` in its channel-open message (`CHANNEL_OPEN` when attacking a

来源摘录 · GitHub Advisory

russh's SSH agent server is susceptible to unbound allocations via repeated SSH_AGENT_CONSTRAIN_CONFIRM messages

CVE-2026-116696

### Summary **All evidence, reproduction steps, and scripts in the report were verified against a real running instance

来源摘录 · GitHub Advisory

zip: legacy Shrink/Reduce/Implode decoder: denial of service from attacker-controlled ZIP64 uncompressed size

CVE-2026-115907

### Summary A malicious 149-byte ZIP archive can cause a denial of service in applications that enable `legacy-zip` and

来源摘录 · GitHub Advisory

zip: Arbitrary file write outside the extraction directory, because ZipArchive::extract validates symlink targets lexically.

CVE-2026-115908

### Summary - **Verified version:** zip `9.0.0-pre3` - **Affected versions:** `7.2.0` and later - **Precondition:** The

来源摘录 · GitHub Advisory

zip: AES Entry HMAC Authentication Bypass on Premature EOF

CVE-2026-115906

### Summary An AES-encrypted (AE-x) entry's authentication code is verified only when the reader's byte counter lands e

来源摘录 · GitHub Advisory

zip: Unbounded Symlink-Target Handling Can Abort Or Exhaust Memory During Extraction

CVE-2026-115909

### Summary The symbolic-link branch of `ZipArchive::extract_internal()` allocates a buffer using an attacker-declared

来源摘录 · GitHub Advisory

Cedar: JSON template is in scope missing slot-id validation allows link panic and decision divergence

Cedar users must be using all of the following features to be affected by this advisory: JSON format policies, policy te

来源摘录 · GitHub Advisory

Wasmtime: Cranelift backend on aarch64 can jump to incorrect target on large Wasm `br_table` instruction

CVE-2026-115893

## Summary When running with the Cranelift compiler backend on an aarch64 target, Wasmtime can compile a Wasm module wi

历史摘要 · 未重新核验 · GitHub Advisory

russh is a Rust SSH client and server library that includes an SSH agent protocol implementation. Prior to 0.65.0, the client Session::process_packet path in russh/src/client/en...

CVE-2026-116773

russh is a Rust SSH client and server library that includes an SSH agent protocol implementation. Prior to 0.65.0, the c

来源摘录 · NVD / GitHub Advisory

rustls: ECH rejection can expose buffered application data to authenticated outer server before `ech_required` alert

In rustls 0.23.44 and 0.23.45, application data that a client buffers before the handshake completes is sent to the serv

历史摘要 · 未重新核验 · GitHub Advisory

rustls: An unauthenticated ServerHello poisons the per-name key-exchange record, so later ClientHellos carry only a classical X25519 share

## Summary The client records the server-selected key-exchange group per server name when it processes the ServerHello,

历史摘要 · 未重新核验 · GitHub Advisory

Wasmtime: Panic lowering a host-created component model stream into a guest that expects a different payload type

CVE-2026-115892

### Summary Wasmtime may panic when the host lowers a component model `stream` or `future` into a guest, if the host cr

历史摘要 · 未重新核验 · GitHub Advisory

Wasmtime: Bit-packing in Cranelift compiler causes silent overflow and miscompilation

CVE-2026-115889

## Summary In Wasmtime prior to v43, the Cranelift compiler backend bit-packs its SSA value indices in a way that can r

历史摘要 · 未重新核验 · GitHub Advisory

Fallow: A `.*` glob segment let an analyzed repository make Fallow test paths in the parent of the project root

### Impact Fallow expands some globs from the analyzed repository on disk. Before 3.34.0, a segment such as `.*`, `.?`

历史摘要 · 未重新核验 · GitHub Advisory

Fallow: Jest and Vitest `projects` entries let an analyzed repository make Fallow read files outside the project root

CVE-2026-115569

### Impact Fallow reads the Jest and Vitest configs of the repository that it analyzes. A Jest `projects` entry or a Vi

历史摘要 · 未重新核验 · GitHub Advisory

Tokio: Race condition in `tokio::time::Interval`

CVE-2026-115567

### Summary On the multi-threaded runtime, there is a race condition between `Interval::poll_tick` and the runtime's ti

历史摘要 · 未重新核验 · GitHub Advisory

gitoxide gix: untrusted .git/config disables filesystem .git-protection path checks via unfiltered protect_options()

## Summary In the `gix` crate, `Cache::protect_options()` in `gix/src/config/cache/access.rs` reads the three filesyste

历史摘要 · 未重新核验 · GitHub Advisory

russh: Unbounded memory allocation in agent protocol server via crafted constraint records

CVE-2026-111061

### Summary `russh_keys::agent::server::add_key` (`russh/src/keys/agent/server.rs:271-319`) spawns a dedicated tokio ta

历史摘要 · 未重新核验 · GitHub Advisory