EUVD-2026-42399

AsyncSSH is a Python package which provides an asynchronous client and server implementation of the SSHv2 protocol on top of the Python asyncio framework. Prior to 2.23.1, a malicious SSH server can write arbitrary files on the asyncssh SCP client's filesystem by sending filenames containing ../...

PT-2018-18256 · Asyncssh +2 · Asyncssh +2

Name of the Vulnerable Software and Affected Versions: AsyncSSH versions prior to 1.12.1 Description: The issue arises from the SSH server implementation not properly checking whether authentication is completed before processing other requests. This allows a customized SSH client to bypass the...