russh
Security Risk Profile
27
/100
lowSecurity Risk Score
Comprehensive risk assessment based on 3 vulnerabilities, EPSS scores, exploitation status, and remediation availability.
📅 Data spans from December 19, 2023 to present
3
Total CVEs
0
Critical+High
0
Exploited
0
Unpatched
Threat Assessment
Avg CVSS
5.3
Base severity
Avg EPSS
0%
Exploit probability
Unpatched
0
Critical/High
Risk Level
27/100
low
🆕 2Fresh (<7d)📈 2 in Last 30 Days
Severity Distribution
Critical
0High
0Medium
2Low
0Exploit Likelihood
>50% chance
020-50%
05-20%
0<5%
0Age Distribution
Common Weaknesses (CWE)
1
Incorrect Type Cast
1
Most Affected Products
1. russh russh3
2. AsyncSSH AsyncSSH1
3. Dropbear Dropbear1
4. Erlang Erlang ssh1
5. Golang golang.org/x/crypto1
Recent Vulnerabilities
See more →CVE-2026-73430
CVSS 5.3medium
Russh: Pre-auth remote panic via all-zero Curve25519 peer public value (encode_mpint OOB)
8/12/2026🔧 No Patch
CVE-2026-73429
CVSS 5.3medium
Russh: client wrong-length X25519 `clone_from_slice` panic (pre-auth DoS)
8/12/2026🔧 No Patch
https://seclists.org/oss-sec/2023/q4/297
unknown
CVE-2023-48795: Prefix Truncation Attacks in SSH Specification (Terrapin Attack)
12/19/2023🔧 No Patch
Monitor russh in Real-Time
Get instant alerts when new vulnerabilities are discovered. Stay ahead of security threats with SecAlerts.