← Packages
rust-pageant-0.2
Rust crate "pageant"
- Current
- 0.2.1
- Candidate
- 0.2.5Stale
- Release line
- 0.2.x
- License
- Apache-2.0
BuildDeps
Advisory · 2
Provider matches do not establish RPM applicability. Local patches, bundled dependencies and binary artifacts are not evaluated.
- Summary
- pageant: Out-of-bounds read / oversized allocation in `pageant` MemoryMap::read via a malicious Pageant agent (Windows)OSV
- Fixed events
- 0.2.3OSV
- EPSS model date
- 2026-11-10FIRST
- EPSS probability
- 0.191%FIRST
- Returned advisory
- GHSA-g4mp-vgx3-xrvmOSV
- Aliases
- GHSA-g4mp-vgx3-xrvmOSV
- KEV
- NoCISA
- CVSS_V3
- CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:HOSV
- Summary
- pageant: unbounded frame buffering on peer-controlled 4-byte length prefix (memory-exhaustion DoS)OSV
- Fixed events
- 0.2.5OSV
- EPSS model date
- 2026-11-10FIRST
- EPSS probability
- 0.294%FIRST
- Returned advisory
- GHSA-662x-8wvj-2276OSV
- Aliases
- GHSA-662x-8wvj-2276OSV
- KEV
- NoCISA
- CVSS_V4
- CVSS:4.0/AV:N/AC:L/AT:P/PR:N/UI:P/VC:N/VI:N/VA:L/SC:N/SI:N/SA:NOSV
Description
Source code for takopackized Rust crate "pageant"
Changelog
PR · 2
Checks
| Monitor | Observation | Last checked |
|---|---|---|
Stale Repository refresh: git fetch exited 128 (authentication) | ||
Stale Source last confirmed at 2026-11-12T05:22:32+00:00; repository refresh overdue. | ||
Checked | ||
Checked | ||
Not configured No reliable monitor identity/configuration. | — | |
Checked Compared same-provider, same-project SPDX metadata for this version pair. | Last attempted | |
Checked | Last attempted | |
Checked Current source component only; local patches, build options, bundled dependencies and binary artifacts are not evaluated. | Last attempted | |
Checked |