PT-2023-33026

Name of the Vulnerable Software and Affected Versions AsyncSSH versions 2.14.1 and earlier Description The vulnerability allows a man-in-the-middle attacker to strip an arbitrary number of messages right after the initial key exchange, breaking SSH extension negotiation and downgrading connection...