Skip to content

russh: Post-decompression SSH packet size was not bounded, allowing remote oversized compressed packets

High severity GitHub Reviewed Published May 23, 2026 in Eugeny/russh • Updated Jun 11, 2026

No open alerts for this advisory

Give feedback on Dependabot alerts