CRITICAL 9.8 PyPI
GHSA-97cv-6pjf-5f9q · CVE-2018-7749, PYSEC-2018-108 AsyncSSH SSH Server Authentication Bypass
Modified: 2/16/2025
package
PyPI / asyncssh
pkg:pypi/asyncssh
HIGH 8.1 PyPI
GHSA-c35q-ffpf-5qpm · CVE-2023-46446, PYSEC-2023-239 AsyncSSH Rogue Session Attack
Modified: 2/4/2026
MEDIUM 5.3 PyPI
GHSA-cfc2-wr2v-gxm5 · CVE-2023-46445, PYSEC-2023-237 AsyncSSH Rogue Extension Negotiation
Modified: 2/4/2026
MEDIUM PyPI
GHSA-g794-3fmp-753h · CVE-2026-45309 AsyncSSH `AuthorizedKeysFile %u` path traversal allows attacker-selected authorized keys to authenticate a traversal username
Modified: 5/27/2026
MEDIUM 5.9 PyPI
GHSA-hfmc-7525-mj55 AsyncSSH vulnerable to Prefix Truncation Attack (a.k.a. Terrapin Attack) against ChaCha20-Poly1305 and Encrypt-then-MAC
Modified: 12/7/2024
— PyPI
PYSEC-2018-108 · CVE-2018-7749, GHSA-97cv-6pjf-5f9q Modified: 11/8/2023
MEDIUM 5.9 PyPI
PYSEC-2023-237 · CVE-2023-46445, GHSA-cfc2-wr2v-gxm5 Modified: 11/17/2023
MEDIUM 6.8 PyPI
PYSEC-2023-239 · CVE-2023-46446, GHSA-c35q-ffpf-5qpm Modified: 11/20/2023