Vulnerabilities

TI-2026-44984 CVE-2026-62949 · GHSA-rw4j-r22c-9gc3

AsyncSSH: asyncio event-loop freeze via SSH maximum packet size = 0 in SSH_MSG_CHANNEL_OPEN / OPEN_CONFIRMATION

LOW 29

AsyncSSH is a Python package which provides an asynchronous client and server implementation of the SSHv2 protocol on top of the Python asyncio framework.

CVSS 3.1MEDIUM 6.5 Network Low privileges No interaction EPSS 0.00389 Published 2026-09-16 Partial fix · 2.24.0 CWE-835

TI-2026-39424 CVE-2026-54590 · GHSA-qr67-gv47-xwwh

AsyncSSH AuthorizedKeysFile username substitution bypass through ~ and environment expansion

MEDIUM 60

AsyncSSH is a Python package which provides an asynchronous client and server implementation of the SSHv2 protocol on top of the Python asyncio framework.

CVSS 3.1MEDIUM 5.9 Network No auth No interaction EPSS 0.00336 Published 2026-07-08 Fixed in 2.23.1 CWE-22

TI-2026-39425 CVE-2026-54591 · GHSA-2wxc-x7rj-hg8f

AsyncSSH: SCP Path Traversal to Arbitrary File Write

LOW 36

AsyncSSH is a Python package which provides an asynchronous client and server implementation of the SSHv2 protocol on top of the Python asyncio framework.

CVSS 3.1HIGH 8.1 Network No auth User interaction EPSS 0.00492 Published 2026-07-08 Fixed in 2.23.1 CWE-22

Vulnerabilities

Filters

AsyncSSH: asyncio event-loop freeze via SSH maximum packet size = 0 in SSH_MSG_CHANNEL_OPEN / OPEN_CONFIRMATION

AsyncSSH AuthorizedKeysFile username substitution bypass through ~ and environment expansion

AsyncSSH: SCP Path Traversal to Arbitrary File Write