AP
Vendor
Asyncssh Project
5
CVEs
0
On KEV
0
New 30D
Products
Recent CVEs
| CVE | Product | CVSS | Published | Summary |
|---|---|---|---|---|
| CVE-2026-45309 | AS Asyncssh Asyncssh Project | 7.5 | Jul 17 | AsyncSSH `AuthorizedKeysFile %u` path traversal allows attacker-selected authorized keys to authenticate a traversal username |
| CVE-2023-48795 | AS Asyncssh Asyncssh Project | 5.9 | Dec 18 | The SSH transport protocol with certain OpenSSH extensions, found in OpenSSH before 9.6 and other products, allows remote attackers to bypass integrity checks such that some… |
| CVE-2023-46446 | AS Asyncssh Asyncssh Project | 6.8 | Nov 14 | An issue in AsyncSSH before 2.14.1 allows attackers to control the remote end of an SSH client session via packet injection/removal and shell emulation, aka a "Rogue Session… |
| CVE-2023-46445 | AS Asyncssh Asyncssh Project | 5.9 | Nov 14 | An issue in AsyncSSH before 2.14.1 allows attackers to control the extension info message (RFC 8308) via a man-in-the-middle attack, aka a "Rogue Extension Negotiation." |
| CVE-2018-7749 | AS Asyncssh Asyncssh Project | 9.8 | Mar 12 | The SSH server implementation of AsyncSSH before 1.12.1 does not properly check whether authentication is completed before processing other requests |