MEDIUM5.9
PYSEC-2023-237
Quick fix
PYSEC-2023-237 — asyncssh: upgrade to the fixed version with the command below.
pip install --upgrade 'asyncssh>=2.14.1'Details
An issue in AsyncSSH v2.14.0 and earlier allows attackers to control the extension info message (RFC 8308) via a man-in-the-middle attack.
Are you affected?
Enter the version of the package you're using.