Skip to content
OpenAdvisories

Product · warp-tech

russh

1 known vulnerabilities.

All Critical High Medium Low Exploited only Public exploit

1 result · Clear filters · Feed

  • Medium 5.9
    CVE-2023-28113

    russh may use insecure Diffie-Hellman keys

    russh is a Rust SSH client and server library. Starting in version 0.34.0 and prior to versions 0.36.2 and 0.37.1, Diffie-Hellman key validation is insufficient, which can lead to insecure shared secrets and therefore breaks confidentiality. Connections betwe…

    warp-tech russh russh crates.io