Asyncssh (Asyncssh Project) - vulnerabilities (CVEs)

5 CVEs, 0 in the last 30 days, 64 known versions, newest CVE from 2026-07-17. Vendor: Asyncssh Project.

CVEs of Asyncssh

• CVE-2026-45309 - CVSS 8.2 (high), 2026-07-17: AsyncSSH is a Python package which provides an asynchronous client and server implementation of the SSHv2 protocol on top of the Python asyncio framework.…
• CVE-2023-48795 - CVSS 5.9 (medium), 2023-12-18: The SSH transport protocol with certain OpenSSH extensions, found in OpenSSH before 9.6 and other products, allows remote attackers to bypass integrity checks…
• CVE-2023-46446 - CVSS 6.8 (medium), 2023-11-14: An issue in AsyncSSH before 2.14.1 allows attackers to control the remote end of an SSH client session via packet injection/removal and shell emulation, aka a…
• CVE-2023-46445 - CVSS 5.9 (medium), 2023-11-14: An issue in AsyncSSH before 2.14.1 allows attackers to control the extension info message (RFC 8308) via a man-in-the-middle attack, aka a "Rogue Extension…
• CVE-2018-7749 - CVSS 9.8 (critical), 2018-03-12: The SSH server implementation of AsyncSSH before 1.12.1 does not properly check whether authentication is completed before processing other requests. A…