VDB
KO
MEDIUM 5.9

PYSEC-2023-237

Details

An issue in AsyncSSH v2.14.0 and earlier allows attackers to control the extension info message (RFC 8308) via a man-in-the-middle attack.

Are you affected?

Enter the version of the package you're using.

Affected packages

PyPI / asyncssh
Introduced in: 0 Fixed in: 2.14.1
Fix pip install --upgrade 'asyncssh>=2.14.1'

References