Vulnerabilities matching "python-asyncssh" — 13 matching vulnerabilities

Concerned about your application's security?

Vulert continues monitoring your dependencies and alerts you when new vulnerabilities are disclosed — no installation and no source-code access required.

Scan your app free →
Severity Vulnerability Package Ecosystem Disclosed Fixed version
6.5 medium Critical Vulnerability in Python AsyncSSH Package: Denial of Service Risk python-asyncssh Debian 16 Sep 2026 No fix published
Unrated Path Traversal Vulnerability in AsyncSSH Package python-asyncssh Debian 17 Jul 2026 No fix published
5.9 medium Insecure Token Handling in AsyncSSH Package Leads to Directory Escape Vulnerability python-asyncssh Debian 08 Jul 2026 No fix published
8.1 high Arbitrary File Write Vulnerability in Python AsyncSSH Package python-asyncssh Debian 08 Jul 2026 No fix published
Unrated Critical Security Update for python-asyncssh: Addressing Multiple Vulnerabilities python-asyncssh Debian 27 Sep 2024 2.5.0-0.1+deb11u1
Unrated DSA-5750-1: python-asyncssh - security update python-asyncssh Debian 18 Aug 2024 2.10.1-2+deb12u1
Unrated Security Update for python-asyncssh python-asyncssh Debian 01 Feb 2024 1.12.2-1+deb10u1
6.8 medium Rogue Session Attack in AsyncSSH: Control Over SSH Client Sessions python-asyncssh Debian 14 Nov 2023 2.5.0-0.1+deb11u1
5.9 medium Rogue Extension Negotiation Vulnerability in AsyncSSH Package python-asyncssh Debian 14 Nov 2023 2.5.0-0.1+deb11u1
Unrated Rogue Session Attack Vulnerability in AsyncSSH Package python-asyncssh Debian 14 Nov 2023 2.5.0-0.1+deb11u1
Unrated Rogue Extension Negotiation Vulnerability in AsyncSSH Package python-asyncssh Debian 14 Nov 2023 2.5.0-0.1+deb11u1
9.8 critical Critical Authentication Bypass in AsyncSSH Package python-asyncssh Debian 12 Mar 2018 1.12.1-1
Unrated Authentication Bypass Vulnerability in AsyncSSH Package python-asyncssh Debian 12 Mar 2018 1.12.1-1
Subscribe to Vulert on Telegram
Daily digest of new CVEs, critical and high severity, affected packages and fixes — plus a weekly roundup.
Join the channel →

Questions

Searching the database

How do I search for a CVE or a package?

Type a CVE id, package name, ecosystem or keyword into the search field. Results include the severity, the affected package, the ecosystem, the disclosure date and the fixed version.

Can I filter by severity or by whether a fix exists?

Yes. The filters on the left narrow the list to critical, high, medium or low vulnerabilities, to a single ecosystem, and to vulnerabilities that have a fix available or none yet.

What does "No fix published" mean?

No patched version has been released for that vulnerability yet. The vulnerability page still shows the affected range and any workaround that can reduce exposure in the meantime.