Security
فارسی
All products

asyncssh

PyPI · Package
8 reports
Vulnerability alerts
Follow
ReportProductEcosystemSeverityFix statusLast updated
AsyncSSH: asyncio event-loop freeze via SSH maximum packet size = 0 in SSH_MSG_CHANNEL_OPEN / OPEN_CONFIRMATIONCVE-2026-62949 · GHSA-RW4J-R22C-9GC3Version ranges need review. asyncsshRed Hat Ceph Storage 7/rhceph/rhceph-7-rhel9 PyPIRed Hat Medium Fix reported
asyncssh has SCP Path Traversal to Arbitrary File WriteCVE-2026-54591 · GHSA-2WXC-X7RJ-HG8FVersion ranges need review. asyncssh PyPI High Fix reported
asyncssh has an incomplete fix for CVE-2026-45309 — AuthorizedKeysFile %u still escapes the intended directory via a leading ~ (and weakly via ${ENV}) username substitutionCVE-2026-54590 · GHSA-QR67-GV47-XWWHVersion ranges need review. asyncssh PyPI Medium Fix reported
AsyncSSH `AuthorizedKeysFile %u` path traversal allows attacker-selected authorized keys to authenticate a traversal usernameCVE-2026-45309 · GHSA-G794-3FMP-753HVersion ranges need review. asyncsshRed Hat Ceph Storage 7/rhceph/rhceph-7-rhel9 PyPIRed Hat Medium Fix reported
AsyncSSH Rogue Extension NegotiationCVE-2023-46445 · GHSA-CFC2-WR2V-GXM5Version ranges need review. asyncsshRed Hat Ceph Storage 6/python-asyncssh PyPIRed Hat Medium Fix reported
AsyncSSH Rogue Session AttackCVE-2023-46446 · GHSA-C35Q-FFPF-5QPMVersion ranges need review. asyncsshRed Hat Ceph Storage 6/python-asyncssh PyPIRed Hat High Fix reported
AsyncSSH SSH Server Authentication BypassCVE-2018-7749 · GHSA-97CV-6PJF-5F9QVersion ranges need review. asyncssh PyPI Critical Fix reported
AsyncSSH vulnerable to Prefix Truncation Attack (a.k.a. Terrapin Attack) against ChaCha20-Poly1305 and Encrypt-then-MACGHSA-HFMC-7525-MJ55 asyncssh PyPI Medium Fix reported