Vulnerability Database · Debian · python-asyncssh · Version
python-asyncssh 2.5.0-0.1
2.5.0-0.1 is affected by 7 vulnerabilities.
The vulnerabilities that cover this exact version are listed below with the fixed version to move to.
Critical 0 High 1 Medium 2 Low 0 Unrated 4
-
Database updated 23/Oct/2026
Concerned about your application's security?
Vulert continues monitoring your dependencies and alerts you when new vulnerabilities are disclosed. No installation and no source-code access required.
01 Vulnerabilities affecting this version
python-asyncssh 2.5.0-0.1 vulnerabilities
7 vulnerabilities cover python-asyncssh 2.5.0-0.1. Open the full list in the database.
| Vulnerability | Severity | Fixed version | Disclosed |
|---|---|---|---|
| Arbitrary File Write Vulnerability in Python AsyncSSH Package | 8.1 high | No fix published | 08 Jul 2026 |
| Rogue Session Attack in AsyncSSH: Control Over SSH Client Sessions | 6.8 medium | 2.5.0-0.1+deb11u1 | 14 Nov 2023 |
| Rogue Extension Negotiation Vulnerability in AsyncSSH Package | 5.9 medium | 2.5.0-0.1+deb11u1 | 14 Nov 2023 |
| Path Traversal Vulnerability in AsyncSSH Package | N/A unrated | No fix published | 17 Jul 2026 |
| Critical Security Update for python-asyncssh: Addressing Multiple Vulnerabilities | N/A unrated | 2.5.0-0.1+deb11u1 | 27 Sep 2024 |
| Rogue Session Attack Vulnerability in AsyncSSH Package | N/A unrated | 2.5.0-0.1+deb11u1 | 14 Nov 2023 |
| Rogue Extension Negotiation Vulnerability in AsyncSSH Package | N/A unrated | 2.5.0-0.1+deb11u1 | 14 Nov 2023 |
Looking for another version, or everything Vulert holds for python-asyncssh?
Questions
About python-asyncssh 2.5.0-0.1
Is python-asyncssh 2.5.0-0.1 vulnerable?
Yes. 7 vulnerabilities in the Vulert database cover python-asyncssh 2.5.0-0.1: 0 critical, 1 high, 2 medium and 0 low, plus 4 not yet rated. Each entry above names the fixed version to move to.
How do I monitor python-asyncssh for upcoming vulnerabilities?
Upload the manifest or SBOM for your application at vulert.com/scanner and Vulert keeps checking the python-asyncssh version you actually run against new disclosures, then alerts you when one affects it. There is no installation and no source-code access required.