What’s Vulnerable › Products

ronf asyncssh vulnerabilities

8 known vulnerabilities, 0 confirmed exploited in the wild (CISA KEV), 4 published in the last 12 months.

Check whether your ronf asyncssh version is affected

Latest ronf asyncssh vulnerabilities

• CVE-2026-62949 — AsyncSSH: asyncio event-loop freeze via SSH maximum packet size = 0 in SSH_MSG_CHANNEL_OPEN / OPEN_CONFIRMATION (CVSS 6.5)
• CVE-2026-45309 — AsyncSSH `AuthorizedKeysFile %u` path traversal allows attacker-selected authorized keys to authenticate a traversal username (CVSS 7.5)
• CVE-2026-54591 — AsyncSSH: SCP Path Traversal to Arbitrary File Write (CVSS 8.1)
• CVE-2026-54590 — AsyncSSH AuthorizedKeysFile username substitution bypass through ~ and environment expansion (CVSS 5.9)
• CVE-2023-48795 — Prefix Truncation Attack against ChaCha20-Poly1305 and Encrypt-then-MAC aka Terrapin (CVSS 5.9)
• CVE-2023-46446 — (CVSS 6.8)
• CVE-2023-46445 — (CVSS 5.9)
• CVE-2018-7749 — (CVSS 9.8)