w
warpgate project
Security Risk Profile
40
/100
mediumSecurity Risk Score
Comprehensive risk assessment based on 7 vulnerabilities, EPSS scores, exploitation status, and remediation availability.
📅 Data spans from July 14, 2023 to present
7
Total CVEs
5
Critical+High
0
Exploited
1
Unpatched
Threat Assessment
Avg CVSS
7.7
Base severity
Avg EPSS
0%
Exploit probability
Unpatched
1
Critical/High
Risk Level
40/100
medium
Severity Distribution
Critical
0High
5Medium
2Low
0Exploit Likelihood
>50% chance
020-50%
05-20%
0<5%
0Age Distribution
Common Weaknesses (CWE)
1
CSRF
1
2
Integer Overflow
1
3
Buffer Overflow
1
Most Affected Products
1. Warpgate Project Warpgate7
2. Russh Project Russh Rust3
3. rust/russh2
4. Warpgate Warpgate1
5. crates/russh1
Recent Vulnerabilities
See more →CVE-2026-44347
CVSS 6.5medium
Warpgate: SSO CSRF -- State Token Not Validated on Return
May 12, 2026🔧 No Patch
CVE-2026-42189
CVSS 7.5high
Russh: Pre-auth DoS via unbounded allocation in keyboard-interactive auth
May 8, 2026
CVE-2025-54804
CVSS 6.5medium
Russh is missing an overflow check during channel windows adjust
Aug 4, 2025
CVE-2024-43410
CVSS 7.5high
Russh has an OOM Denial of Service due to allocation of untrusted amount
Aug 14, 2024
CVE-2023-48712
CVSS 8.8high
User authorization bug leading to privilege escalation in warpgate
Nov 24, 2023
CVE-2023-43660
CVSS 8.1high
SSH key password bypassed in warpgate
Sep 27, 2023
CVE-2023-37268
CVSS 8.8high
User login confusion with SSO in warpgate
Jul 14, 2023🔧 No Patch
Monitor warpgate project in Real-Time
Get instant alerts when new vulnerabilities are discovered. Stay ahead of security threats with SecAlerts.