Warpgate Project vulnerabilities
We track 3 vulnerabilities in Warpgate Project products. 3 are rated high or critical, and none are known to be exploited. The most recent was published on May 8, 2026.
Latest Warpgate Project vulnerabilities
- 7.5 High severity
russh: Allocation of Resources Without Limits or Throttling
Russh is a Rust SSH client & server library. Prior to version 0.60.1, a pre-authentication denial-of-service vulnerability exists in the server's keyboard-interactive authentication handler. A malicious client can crash any russh-based server that implements k
- 7.5 High severity
russh: Allocation of Resources Without Limits or Throttling
Russh is a Rust SSH client & server library. Allocating an untrusted amount of memory allows any unauthenticated user to OOM a russh server. An SSH packet consists of a 4-byte big-endian length, followed by a byte stream of this length. After parsing and poten
- 8.8 High severity
warpgate: Improper Authentication
Warpgate is an SSH, HTTPS and MySQL bastion host for Linux that doesn't need special client apps. When logging in as a user with SSO enabled an attacker may authenticate as an other user. Any user account which does not have a second factor enabled could be co