Skip to content
OpenAdvisories

Product · ronf

asyncssh

4 known vulnerabilities.

All Critical High Medium Low Exploited only Public exploit

2 results · Clear filters · Feed

  • Medium 6.5
    CVE-2026-62949

    AsyncSSH: asyncio event-loop freeze via SSH maximum packet size = 0 in SSH_MSG_CHANNEL_OPEN / OPEN_CONFIRMATION

    AsyncSSH is a Python package which provides an asynchronous client and server implementation of the SSHv2 protocol on top of the Python asyncio framework. Prior to 2.24.0, _process_channel_open and _process_channel_open_confirmation in asyncssh/connection.py …

    ronf asyncssh asyncssh python-asyncssh Debian Ubuntu PyPI
  • Medium 5.9
    CVE-2026-54590

    AsyncSSH AuthorizedKeysFile username substitution bypass through ~ and environment expansion

    AsyncSSH is a Python package which provides an asynchronous client and server implementation of the SSHv2 protocol on top of the Python asyncio framework. Version 2.23.0 contains an incomplete fix for CVE-2026-45309 in SSHServerConfig._set_tokens that blocks …

    ronf asyncssh python-asyncssh asyncssh Debian Ubuntu PyPI