Dave Kempe 0d4eb24994 deps: batch bump for 1.8.1 ...

- quinn-proto 0.11.14 -> 0.11.16 (RUSTSEC-2026-0185, remote memory
  exhaustion via reqwest; unblocks CI cargo-audit)
- russh 0.61 -> 0.62 (also drops the yanked crypto-bigint 0.7.3)
- tower-http 0.6 -> 0.7
- rustls 0.23.42, uuid 1.24.0, socket2 0.6.5, serde_with 3.21.0,
  rand 0.10.2, webpki-roots 1.0.9, toml 1.1.3, cmov 0.5.4
- fuzz lockfile synced (russh, serde_with, cmov)

Clears the open dependabot queue (#164-#180).

2026-07-20 11:03:43 +10:00

..

fuzz_targets

Security hardening: open redirect, cookie flags, constant-time auth, fuzz targets

2026-02-12 08:42:33 +11:00

.gitignore

Add fuzz testing infrastructure and fix UTF-8 boundary panic

2026-02-07 13:39:16 +11:00

Cargo.lock

deps: batch bump for 1.8.1

2026-07-20 11:03:43 +10:00

Cargo.toml

Security hardening: open redirect, cookie flags, constant-time auth, fuzz targets

2026-02-12 08:42:33 +11:00

FINDINGS.md

Add guacd parser fuzz harness and document fuzzing findings

2026-02-07 14:17:42 +11:00