CVE-2026-73489
1 advisory.
crates.io/russh CVE-2026-73489: medium 4.3, EPSS 0.45%
Russh: Post-auth remote panic via pty-req with more than 130 terminal-mode records
Action: Upgrade russh to 0.62.4 or later.
cargo update -p russh --precise 0.62.4Affected
| introduced | fixed | last affected |
|---|---|---|
| 0 | 0.62.4 | - |
Fixed versions
| 0.62.4 |
Sources
- osv: GHSA-cqjc-rmpq-xprq
- https://github.com/Eugeny/russh/security/advisories/GHSA-cqjc-rmpq-xprq
- https://github.com/Eugeny/russh/commit/8912512371820167a12a0a638bd666856ce458ad
- https://github.com/Eugeny/russh
- https://github.com/Eugeny/russh/releases/tag/v0.62.4
CVE-2026-73489 · published · modified · JSON