Russh: Unbounded memory exhaustion via CHANNEL_OPEN flood during a client-stalled rekey

Russh: Channel-scoped server callbacks can be reached without an open channel

Russh: Unchecked keyboard-interactive prompt count in client auth path

pageant: Out-of-bounds read / oversized allocation in `pageant` MemoryMap::read via a malicious Pageant agent (Windows)

Russh: Pre-auth remote panic via all-zero Curve25519 peer public value (encode_mpint OOB)

Russh: client wrong-length X25519 `clone_from_slice` panic (pre-auth DoS)

Russh: SSH identification parsing accepted non-canonical client banners and did not bound pre-banner input

russh server userauth state is not reset when authentication principal changes

russh: peer-declared zero maximum packet size permanently stalls channel writes (silent AsyncWrite hang)

russh's SSH client is susceptible to unbounded allocations via EXT_INFO packets

russh agent server converts constraint records into unbounded never-rolled-back tasks

Russh: Missing X25519 zero-point validation in hybrid ML-KEM key exchange

Russh: Post-auth remote panic via pty-req with more than 130 terminal-mode records