{"action":"Upgrade asyncssh to 2.14.2 or later.","affected":[{"fixed":"2.14.2","introduced":"0"}],"component":"asyncssh","cve_ids":[],"ecosystem":"PyPI","exploited":false,"fixed_versions":["2.14.2"],"ghsa_id":"GHSA-hfmc-7525-mj55","id":"tcs_01M5KFKHCW0F57RVJVJSS4W4N9","modified_at":"2024-12-07T05:40:31.605685Z","published_at":"2023-12-18T19:21:45Z","references":["https://osv.dev/vulnerability/GHSA-hfmc-7525-mj55","https://github.com/ronf/asyncssh/security/advisories/GHSA-hfmc-7525-mj55","https://github.com/ronf/asyncssh/commit/0bc73254f41acb140187e0c89606311f88de5b7b","https://github.com/ronf/asyncssh/commit/69f5a41b458b29367a65fe469c2b0255b5db210a","https://github.com/ronf/asyncssh"],"severity":{"label":"medium","score":5.9},"sources":[{"source":"osv","source_id":"GHSA-hfmc-7525-mj55","url":"https://osv.dev/vulnerability/GHSA-hfmc-7525-mj55"}],"summary":"AsyncSSH vulnerable to Prefix Truncation Attack (a.k.a. Terrapin Attack) against ChaCha20-Poly1305 and Encrypt-then-MAC"}