crates.io/pageant CVE-2026-102820: medium 6.2, EPSS 0.13%
pageant: Out-of-bounds read / oversized allocation in `pageant` MemoryMap::read via a malicious Pageant agent (Windows)
Action: Upgrade pageant to 0.2.3 or later.
cargo update -p pageant --precise 0.2.3Affected
| introduced | fixed | last affected |
|---|---|---|
| 0 | 0.2.3 | - |
Fixed versions
| 0.2.3 |
Sources
- osv: GHSA-g4mp-vgx3-xrvm
- https://github.com/Eugeny/russh/security/advisories/GHSA-g4mp-vgx3-xrvm
- https://nvd.nist.gov/vuln/detail/CVE-2026-102820
- https://github.com/Eugeny/russh/commit/5d566989ebabfdebfe6b33243d31765a0812260b
- https://github.com/Eugeny/russh
- https://github.com/Eugeny/russh/releases/tag/v0.63.2
CVE-2026-102820 · published · modified · JSON