Dave Kempe 86cee24e63 fix(fuzz): bump russh 0.62.2 -> 0.62.4 in the fuzz lockfile ...

Clears Dependabot alerts GHSA-g9hv-x236-4qp3, GHSA-cqjc-rmpq-xprq,
GHSA-5xvq-cp9x-6p6r (russh pre/post-auth panics, patched in 0.62.4). Only the
fuzz harness's lockfile was affected; the shipped binary already uses russh
0.62.4 via the main lockfile, so v1.9.0 is not vulnerable.

2026-07-26 08:32:01 +10:00

..

fuzz_targets

Security hardening: open redirect, cookie flags, constant-time auth, fuzz targets

2026-02-12 08:42:33 +11:00

.gitignore

Add fuzz testing infrastructure and fix UTF-8 boundary panic

2026-02-07 13:39:16 +11:00

Cargo.lock

fix(fuzz): bump russh 0.62.2 -> 0.62.4 in the fuzz lockfile

2026-07-26 08:32:01 +10:00

Cargo.toml

Security hardening: open redirect, cookie flags, constant-time auth, fuzz targets

2026-02-12 08:42:33 +11:00

FINDINGS.md

Add guacd parser fuzz harness and document fuzzing findings

2026-02-07 14:17:42 +11:00