Threats tagged 'brew-dvc-cve-2026-54591'

1 threat

Severity	CVSS	Signals	Threat	Source	Published	Score and star
High	8.1	EPSS 0.5%	CVE-2026-54591Python asyncssh: AsyncSSH is a Python package which provides an asynchronous client and server implementation of the High8.1EPSS 0.5%2026-07-08GCVE DatabaseCVE-2026-54591 AsyncSSH versions through 2.23.0 have a path traversal vulnerability in the SCP client. A malicious SSH server can exploit this to write files outside the intended directory, potentially overwriting critical user files like ~/.bashrc or ~/.ssh/authorized_keys. This could lead to code execution. The issue is fixed in AsyncSSH version 3.67.1_7. EPSS 0.5%Report on CVE-2026-54591 Vulnerability #brew-dvc-cve-2026-54591 #homebrew	GCVE Database	2026-07-08

Page 1 of 1