https://blog.leavitt.dev/tags/cve/ Recent content in Cve on Corey Leavitt Hugo en-us Mon, 27 Apr 2026 00:00:00 +0000 https://blog.leavitt.dev/posts/cve-2026-42189-russh/ Mon, 27 Apr 2026 00:00:00 +0000 https://blog.leavitt.dev/posts/cve-2026-42189-russh/ How designing the fuzz harness around real attacker surface, instead of pointing libfuzzer at every parser I could see, surfaced an unbounded allocation in russh’s keyboard-interactive auth in under 20 minutes.