https://cve.radiocsirt.org Contains only the most 10 recent entries. http://www.rssboard.org/rss-specification python-feedgen en Thu, 08 Oct 2026 12:55:46 +0000 https://cve.radiocsirt.org/vuln/cve-2026-48107 <p><strong>Affected:</strong> Eugeny russh</p> <p>Russh is a Rust SSH client &amp; server library. From version 0.37.0 to before version 0.61.0, in the russh client keyboard-interactive authentication path, a malicious SSH server could send a USERAUTH_INFO_REQUEST with an attacker-controlled prompt count, and the client would use that raw count directly in Vec::with_capacity(...) before validating that enough prompt data was actually present in the packet. This issue has been patched in version 0.61.0.</p> <p><strong>Affected:</strong> Eugeny russh</p> <p>Russh is a Rust SSH client &amp; server library. From version 0.37.0 to before version 0.61.0, in the russh client keyboard-interactive authentication path, a malicious SSH server could send a USERAUTH_INFO_REQUEST with an attacker-controlled prompt count, and the client would use that raw count directly in Vec::with_capacity(...) before validating that enough prompt data was actually present in the packet. This issue has been patched in version 0.61.0.</p> https://cve.radiocsirt.org/vuln/cve-2026-48107