{"action":"Upgrade pageant to 0.2.3 or later.","affected":[{"fixed":"0.2.3","introduced":"0"}],"component":"pageant","cve_ids":["CVE-2026-102820"],"ecosystem":"crates.io","epss":0.00129,"exploited":false,"fixed_versions":["0.2.3"],"ghsa_id":"GHSA-g4mp-vgx3-xrvm","id":"tcs_01M5KEXSGREQM1TAB8X8DA3KEY","modified_at":"2026-10-01T00:00:04.680017331Z","published_at":"2026-09-30T23:41:02Z","references":["https://osv.dev/vulnerability/GHSA-g4mp-vgx3-xrvm","https://github.com/Eugeny/russh/security/advisories/GHSA-g4mp-vgx3-xrvm","https://nvd.nist.gov/vuln/detail/CVE-2026-102820","https://github.com/Eugeny/russh/commit/5d566989ebabfdebfe6b33243d31765a0812260b","https://github.com/Eugeny/russh","https://github.com/Eugeny/russh/releases/tag/v0.63.2"],"severity":{"label":"medium","score":6.2},"sources":[{"source":"osv","source_id":"GHSA-g4mp-vgx3-xrvm","url":"https://osv.dev/vulnerability/GHSA-g4mp-vgx3-xrvm"}],"summary":"pageant: Out-of-bounds read / oversized allocation in `pageant` MemoryMap::read via a malicious Pageant agent (Windows)"}