Eugeny

Eugeny Tabby: Path Traversal

Tabby: RCE via `tabby://run` URL Scheme

also in 1 other product

russh: Client-side channel-scoped Handler callbacks fire for channel IDs the client never opened

Russh has an OOM Denial of Service due to allocation of untrusted amount

also in 2 other products

Eugeny Russh: Missing Authorization

Russh: Unbounded memory exhaustion via CHANNEL_OPEN flood during a client-stalled rekey

Russh: Pre-auth DoS via unbounded allocation in keyboard-interactive auth

also in 2 other products

Russh: Pre-auth remote panic via all-zero Curve25519 peer public value (encode_mpint OOB)

Russh: client wrong-length X25519 `clone_from_slice` panic (pre-auth DoS)

Russh: SSH message fields were decoded through allocation-first parsers before field-specific bounds

Russh: Channel-scoped server callbacks can be reached without an open channel

Eugeny Tabby: OS Command Injection

also in 1 other product

Eugeny Russh: Memory Allocation with Excessive Size Value

also in 1 other product

Tabby: Dragging and Dropping a File into Tabby Can Lead to Code Execution

also in 1 other product

Eugeny Russh: Allocation of Resources Without Limits or Throttling

Eugeny Russh: Allocation of Resources Without Limits or Throttling

russh agent server converts constraint records into unbounded never-rolled-back tasks

also in 1 other product

Tabby has a TCC Bypass via Misconfigured Node Fuses

Russh: Post-auth remote panic via pty-req with more than 130 terminal-mode records

Russh: Configured server auth-attempt cap is not enforced in the USERAUTH_REQUEST runtime path

Tabby has a TCC Bypass via Unnecessary Permissive Entitlements in Tabby

Eugeny Russh: Infinite Loop

russh's SSH client is susceptible to unbounded allocations via EXT_INFO packets

Eugeny Russh: Improper Validation of Array Index

Russh is missing an overflow check during channel windows adjust

also in 2 other products