Asyncssh
Ronf · 4 CVEs
CVE-2026-62949
MEDIUM
AsyncSSH: asyncio event-loop freeze via SSH maximum packet size = 0 in SSH_MSG_CHANNEL_OPEN / OPEN_CONFIRMATION
Sep 16, 2026
CVE-2026-45309
HIGH
AsyncSSH `AuthorizedKeysFile %u` path traversal allows attacker-selected authorized keys to authenticate a traversal us…
Jul 17, 2026
CVE-2026-54590
MEDIUM
AsyncSSH AuthorizedKeysFile username substitution bypass through ~ and environment expansion
Jul 8, 2026
CVE-2026-54591
HIGH
AsyncSSH: SCP Path Traversal to Arbitrary File Write
Jul 8, 2026
| CVE ID | Description | Severity | EPSS | Published |
|---|---|---|---|---|
| CVE-2026-62949 | AsyncSSH: asyncio event-loop freeze via SSH maximum packet size = 0 in SSH_MSG_CHANNEL_OPEN / OPEN_CONFIRMATION | MEDIUM | 0.39% | Sep 16, 2026 |
| CVE-2026-45309 | AsyncSSH `AuthorizedKeysFile %u` path traversal allows attacker-selected authorized keys to authenticate a traversal username | HIGH | 0.59% | Jul 17, 2026 |
| CVE-2026-54590 | AsyncSSH AuthorizedKeysFile username substitution bypass through ~ and environment expansion | MEDIUM | 0.39% | Jul 8, 2026 |
| CVE-2026-54591 | AsyncSSH: SCP Path Traversal to Arbitrary File Write | HIGH | 0.49% | Jul 8, 2026 |
Showing 1 to 4 of 4 CVEs