Login Request a demo
AS
Product
Asyncssh
by Asyncssh Project · last CVE Jul 17, 2026
5
CVEs
0
On KEV
9.8
Max CVSS
0
New 30D
Vulnerabilities5In the news0Timeline
Severity mix
Critical 1High 1Medium 3Low 0
Severity
All severities5Critical1High1Medium3Low0
Exploitation
On CISA KEV0Exploited in the wild0
Watch

Add Asyncssh to your stack to get only the CVEs that touch what you run.

CVECVSSEPSSPublishedSummary · affected versions
CVE-2018-7749
9.8
2%
Mar 12
The SSH server implementation of AsyncSSH before 1.12.1 does not properly check whether authentication is completed before processing other requests
Affected: before 1.12.1
CVE-2026-45309
7.5
1%
Jul 17
AsyncSSH `AuthorizedKeysFile %u` path traversal allows attacker-selected authorized keys to authenticate a traversal username
Affected: before 2.23.0
CVE-2023-46446
6.8
1%
Nov 14
An issue in AsyncSSH before 2.14.1 allows attackers to control the remote end of an SSH client session via packet injection/removal and shell emulation, aka a "Rogue Session…
Affected: before 2.14.1
CVE-2023-48795
5.9
94%
Dec 18
The SSH transport protocol with certain OpenSSH extensions, found in OpenSSH before 9.6 and other products, allows remote attackers to bypass integrity checks such that some…
Affected: before 2.14.2
CVE-2023-46445
5.9
1%
Nov 14
An issue in AsyncSSH before 2.14.1 allows attackers to control the extension info message (RFC 8308) via a man-in-the-middle attack, aka a "Rogue Extension Negotiation."
Affected: before 2.14.1
Showing 5