asyncssh vulnerabilities — 15 matching vulnerabilities

Concerned about your application's security?

Vulert continues monitoring your dependencies and alerts you when new vulnerabilities are disclosed — no installation and no source-code access required.

Scan your app free →
Severity Vulnerability Package Ecosystem Disclosed Fixed version
6.5 medium CVE-2026-62949: AsyncSSH Client and Server Event Loop Freeze via Zero Maximum Packet Size asyncssh PyPI 01 Oct 2026 2.24.0
6.5 medium CVE-2026-62949: AsyncSSH Client and Server Event Loop Freeze via Zero Maximum Packet Size asyncssh PyPI 17 Sep 2026 2.24.0
8.1 high CVE-2026-54591: asyncssh Arbitrary File Write Vulnerability via SCP Path Traversal asyncssh PyPI 10 Sep 2026 2.23.1
5.9 medium CVE-2026-54590: asyncssh Incomplete Fix Allows Unauthorized Access via Usernames with Leading Tilde asyncssh PyPI 10 Sep 2026 2.23.1
8.1 high CVE-2026-54591: asyncssh SCP Path Traversal Vulnerability Leading to Arbitrary File Write asyncssh PyPI 26 Aug 2026 2.23.1
5.9 medium CVE-2026-54590: asyncssh Incomplete Fix Allows Unauthorized Access via Leading Tilde in AuthorizedKeysFile asyncssh PyPI 26 Aug 2026 2.23.1
6.9 medium CVE-2026-45309: AsyncSSH Path Traversal Vulnerability Allows Unauthorized SSH Authentication asyncssh PyPI 13 Jul 2026 2.23.0
6.9 medium CVE-2026-45309: AsyncSSH Path Traversal Vulnerability Allows Unauthorized SSH Authentication asyncssh PyPI 27 May 2026 2.23.0
5.9 medium AsyncSSH Prefix Truncation Attack against ChaCha20-Poly1305 and Encrypt-then-MAC asyncssh PyPI 18 Dec 2023 2.14.2
5.9 medium CVE-2023-46445: AsyncSSH Extension Info Message Control asyncssh PyPI 14 Nov 2023 2.14.1
6.8 medium CVE-2023-46446: Vulnerability in AsyncSSH Allows Remote Control of SSH Client Session asyncssh PyPI 14 Nov 2023 2.14.1
8.1 high CVE-2023-46446: AsyncSSH Rogue Session Attack asyncssh PyPI 09 Nov 2023 2.14.1
5.3 medium CVE-2023-46445: AsyncSSH Rogue Extension Negotiation asyncssh PyPI 09 Nov 2023 2.14.1
9.8 critical CVE-2018-7749: AsyncSSH SSH Server Authentication Bypass asyncssh PyPI 14 May 2022 1.12.1
Unrated CVE-2018-7749: asyncssh - Incomplete Authentication Check asyncssh PyPI 12 Mar 2018 c161e26cdc0d41b745b63d9f17b437f073bf7ba4
Subscribe to Vulert on Telegram
Daily digest of new CVEs, critical and high severity, affected packages and fixes — plus a weekly roundup.
Join the channel →

Questions

Searching the database

How do I search for a CVE or a package?

Type a CVE id, package name, ecosystem or keyword into the search field. Results include the severity, the affected package, the ecosystem, the disclosure date and the fixed version.

Can I filter by severity or by whether a fix exists?

Yes. The filters on the left narrow the list to critical, high, medium or low vulnerabilities, to a single ecosystem, and to vulnerabilities that have a fix available or none yet.

What does "No fix published" mean?

No patched version has been released for that vulnerability yet. The vulnerability page still shows the affected range and any workaround that can reduce exposure in the meantime.