Skip to content
OpenAdvisories

Vendor

ronf

6 known vulnerabilities.

Products

asyncssh 6
All Critical High Medium Low Exploited only Public exploit

3 results · Clear filters · Feed

  • Medium 6.5
    CVE-2026-77473

    AsyncSSH: SFTP Recursive Copy Path Traversal via Unsanitized Server-Supplied Filenames

    AsyncSSH is a Python package which provides an asynchronous client and server implementation of the SSHv2 protocol on top of the Python asyncio framework. Prior to 2.24.1, recursive remote-to-local SFTP copies in SFTPClient._copy() in asyncssh/sftp.py, reache…

    ronf asyncssh python-asyncssh Debian
  • Medium 6.5
    CVE-2026-62949

    AsyncSSH: asyncio event-loop freeze via SSH maximum packet size = 0 in SSH_MSG_CHANNEL_OPEN / OPEN_CONFIRMATION

    AsyncSSH is a Python package which provides an asynchronous client and server implementation of the SSHv2 protocol on top of the Python asyncio framework. Prior to 2.24.0, _process_channel_open and _process_channel_open_confirmation in asyncssh/connection.py …

    ronf asyncssh python-asyncssh asyncssh Debian Ubuntu PyPI
  • Medium 5.9
    CVE-2026-54590

    AsyncSSH AuthorizedKeysFile username substitution bypass through ~ and environment expansion

    AsyncSSH is a Python package which provides an asynchronous client and server implementation of the SSHv2 protocol on top of the Python asyncio framework. Version 2.23.0 contains an incomplete fix for CVE-2026-45309 in SSHServerConfig._set_tokens that blocks …

    ronf asyncssh python-asyncssh python-asyncssh Debian Ubuntu PyPI