Vulnerabilities

search
ID
Packages
Summary
Published
arrow_upward
Attributes
PYSEC-2026-4026
  • PyPI/asyncssh
 AsyncSSH: asyncio event-loop freeze via SSH maximum packet size = 0 in SSH_MSG_CHANNEL_OPEN / OPEN_CONFIRMATION 01 Oct
  • Fix available
  • Severity - 6.5 (Medium)
GHSA-rw4j-r22c-9gc3
  • PyPI/asyncssh
 AsyncSSH: asyncio event-loop freeze via SSH maximum packet size = 0 in SSH_MSG_CHANNEL_OPEN / OPEN_CONFIRMATION 17 Sep
  • Fix available
  • Severity - 6.5 (Medium)
PYSEC-2026-3808
  • PyPI/asyncssh
 asyncssh has SCP Path Traversal to Arbitrary File Write 10 Sep
  • Fix available
  • Severity - 8.1 (High)
PYSEC-2026-3809
  • PyPI/asyncssh
 asyncssh has an incomplete fix for CVE-2026-45309 — AuthorizedKeysFile %u still escapes the intended directory via a leading ~ (and weakly via ${ENV}) username substitution 10 Sep
  • Fix available
  • Severity - 5.9 (Medium)
GHSA-2wxc-x7rj-hg8f
  • PyPI/asyncssh
 asyncssh has SCP Path Traversal to Arbitrary File Write 26 Aug
  • Fix available
  • Severity - 8.1 (High)
GHSA-qr67-gv47-xwwh
  • PyPI/asyncssh
 asyncssh has an incomplete fix for CVE-2026-45309 — AuthorizedKeysFile %u still escapes the intended directory via a leading ~ (and weakly via ${ENV}) username substitution 26 Aug
  • Fix available
  • Severity - 5.9 (Medium)
PYSEC-2026-2384
  • PyPI/asyncssh
 AsyncSSH `AuthorizedKeysFile %u` path traversal allows attacker-selected authorized keys to authenticate a traversal username 13 Jul
  • Fix available
  • Severity - 6.9 (Medium)
GHSA-g794-3fmp-753h
  • PyPI/asyncssh
 AsyncSSH `AuthorizedKeysFile %u` path traversal allows attacker-selected authorized keys to authenticate a traversal username 27 May
  • Fix available
  • Severity - 6.9 (Medium)
GHSA-hfmc-7525-mj55
  • PyPI/asyncssh
 AsyncSSH vulnerable to Prefix Truncation Attack (a.k.a. Terrapin Attack) against ChaCha20-Poly1305 and Encrypt-then-MAC 18 Dec 2023
  • Fix available
  • Severity - 5.9 (Medium)
PYSEC-2023-237
  • PyPI/asyncssh
 See record for full details 14 Nov 2023
  • Fix available
  • Severity - 5.9 (Medium)
PYSEC-2023-239
  • PyPI/asyncssh
 See record for full details 14 Nov 2023
  • Fix available
  • Severity - 6.8 (Medium)
GHSA-c35q-ffpf-5qpm
  • PyPI/asyncssh
 AsyncSSH Rogue Session Attack 09 Nov 2023
  • Fix available
  • Severity - 8.1 (High)
GHSA-cfc2-wr2v-gxm5
  • PyPI/asyncssh
 AsyncSSH Rogue Extension Negotiation 09 Nov 2023
  • Fix available
  • Severity - 5.3 (Medium)
GHSA-97cv-6pjf-5f9q
  • PyPI/asyncssh
 AsyncSSH SSH Server Authentication Bypass 14 May 2022
  • Fix available
  • Severity - 9.3 (Critical)
PYSEC-2018-108
  • PyPI/asyncssh
  • github.com/ronf/asyncssh
 See record for full details 12 Mar 2018
  • Fix available