pyplanet (>=0.1.5, <=0.3.3) potentially affected by CVE-2026-54590 via asyncssh (1.10.0)

asyncssh PYPI version 1.10.0 is affected by a known vulnerability. The following packages have a transitive dependency on asyncssh and may be impacted: - pyplanet =0.1.5, =0.3.3 Source cves: CVE-2026-54590 Source advisory: OSV:PYSEC-2026-3809...

pyplanet (>=0.4.0, <=0.4.5) potentially affected by CVE-2026-54590 via asyncssh (1.10.1)

asyncssh PYPI version 1.10.1 is affected by a known vulnerability. The following packages have a transitive dependency on asyncssh and may be impacted: - pyplanet =0.4.0, =0.4.5 Source cves: CVE-2026-54590 Source advisory: OSV:PYSEC-2026-3809...

aioasuswrt (>=1.1.20, <=1.1.21) potentially affected by CVE-2026-54590 via asyncssh (1.15.0)

asyncssh PYPI version 1.15.0 is affected by a known vulnerability. The following packages have a transitive dependency on asyncssh and may be impacted: - aioasuswrt =1.1.20, =1.1.21 Source cves: CVE-2026-54590 Source advisory: OSV:PYSEC-2026-3809...

aiida-core (>=2.7.0rc0, <=2.9.2), aiida-gromacs (2.2.2) +77 more potentially affected by CVE-2026-54590 via asyncssh (>=2.0.1, <=2.22.0)

asyncssh PYPI version =2.0.1, =2.7.0rc0, =0.4.1, =0.7.2, =1.2.7, =0.0.1, =1.5.0.dev202411111555, =1.44.2, =0.6.0, =1.7.3, =1.46.0, =0.0.2, =0.3.0, =0.6.5 and more Source cves: CVE-2026-54590 Source advisory: OSV:PYSEC-2026-3809...

CVE-2026-54590 vulnerabilities

Vulnerabilities for packages: airflow...

pyplanet (>=0.0.1, <=0.1.4) potentially affected by CVE-2026-45309 +1 more via asyncssh (1.9.0)

asyncssh PYPI version 1.9.0 is affected by a known vulnerability. The following packages have a transitive dependency on asyncssh and may be impacted: - pyplanet =0.0.1, =0.1.4 Source cves: CVE-2026-45309, CVE-2026-54590 Source advisory: OSV:GHSA-QR67-GV47-XWWH...

pitcrew (>=0.0.1, <=0.0.3) potentially affected by CVE-2026-45309 +1 more via asyncssh (1.16.1)

asyncssh PYPI version 1.16.1 is affected by a known vulnerability. The following packages have a transitive dependency on asyncssh and may be impacted: - pitcrew =0.0.1, =0.0.3 Source cves: CVE-2026-45309, CVE-2026-54590 Source advisory: OSV:GHSA-QR67-GV47-XWWH...

CVE-2026-54590

AsyncSSH is a Python package which provides an asynchronous client and server implementation of the SSHv2 protocol on top of the Python asyncio framework. Version 2.23.0 contains an incomplete fix for CVE-2026-45309 in SSHServerConfig.settokens that blocks /, , and .. before %u substitution in...