Skip to content
OpenAdvisories

Package · Ubuntu

python-asyncssh

8 known vulnerabilities.

All Critical High Medium Low Exploited only

2 results · Clear filters · Feed

  • High 8.2
    CVE-2026-45309

    AsyncSSH `AuthorizedKeysFile %u` path traversal allows attacker-selected authorized keys to authenticate a traversal username

    AsyncSSH is a Python package which provides an asynchronous client and server implementation of the SSHv2 protocol on top of the Python asyncio framework. Prior to 2.23.0, AsyncSSH expands the OpenSSH-compatible AuthorizedKeysFile %u token in asyncssh/config.…

    ronf asyncssh asyncssh python-asyncssh Debian Ubuntu PyPI
  • High 8.1
    CVE-2026-54591

    AsyncSSH: SCP Path Traversal to Arbitrary File Write

    AsyncSSH is a Python package which provides an asynchronous client and server implementation of the SSHv2 protocol on top of the Python asyncio framework. Prior to 2.23.1, a malicious SSH server can write arbitrary files on the asyncssh SCP client's filesyste…

    ronf asyncssh python-asyncssh asyncssh Debian Ubuntu PyPI