EulerOS Virtualization 2.13.1 : python-paramiko (EulerOS-SA-2026-3191)

According to the versions of the python-paramiko packages installed, the EulerOS Virtualization installation on the remote host is affected by the following vulnerabilities : In Paramiko through 4.0.0 before a448945, rsakey.py allows the SHA-1 algorithm.CVE-2026-44405 Tenable has extracted the...

Security Bulletin:Vulnerability in paramiko affects IBM Netezza Appliance

Summary The paramiko package is used by IBM Netezza Appliance. IBM Netezza Appliance has addressed the applicable CVE CVE-2026-44405 Vulnerability Details CVEID:CVE-2026-44405 DESCRIPTION: In Paramiko through 4.0.0 before a448945, rsakey.py allows the SHA-1 algorithm. CWE:CWE-327: Use of a Broken...

EulerOS 2.0 SP13 : python-paramiko (EulerOS-SA-2026-2991)

According to the versions of the python-paramiko packages installed, the EulerOS installation on the remote host is affected by the following vulnerabilities : In Paramiko through 4.0.0 before a448945, rsakey.py allows the SHA-1 algorithm.CVE-2026-44405 Tenable has extracted the preceding...

Security update for python-paramiko

This update for python-paramiko fixes the following issues: CVE-2026-44405: data integrity compromise due to allowed SHA-1 algorithm use bsc1264225. Patch Instructions: To install this SUSE update use the SUSE recommended installation methods like YaST onlineupdate or "zypper patch". Alternativel...

buildrunner (>=3.0.753, <=3.15.1132), cr (1.6.0) +12 more potentially affected by CVE-2026-44405 via paramiko (3.2.0)

paramiko PYPI version 3.2.0 is affected by a known vulnerability. The following packages have a transitive dependency on paramiko and may be impacted: - buildrunner =3.0.753, =1.0.0, =0.4.0, =1.0.706, =0.2.0a0, =0.3.0, =32.3.0, =1.1.5, =0.3.0, =0.8.20 Source cves: CVE-2026-44405 Source advisory:...

a12rta (0.1.0), aac-init (>=0.4.0, <=0.5.11) +751 more potentially affected by CVE-2026-44405 via paramiko (3.5.1)

paramiko PYPI version 3.5.1 is affected by a known vulnerability. The following packages have a transitive dependency on paramiko and may be impacted: - a12rta 0.1.0 - aac-init =0.4.0, =2026.2.3, =4.4.0, =0.0.2, =0.2.0, =0.1.0, =0.3.0, =0.4.1, =1.0.5 and more Source cves: CVE-2026-44405 Source...

logixbase (>=0.1.1, <=0.6.2) potentially affected by CVE-2026-44405 via paramiko (2.10.0)

paramiko PYPI version 2.10.0 is affected by a known vulnerability. The following packages have a transitive dependency on paramiko and may be impacted: - logixbase =0.1.1, =0.6.2 Source cves: CVE-2026-44405 Source advisory: OSV:PYSEC-2026-2858...

cloudmesh-client (4.2.6), codev (>=0.5.1a10, <=0.7.4a3) potentially affected by CVE-2026-44405 via paramiko (2.0.0)

paramiko PYPI version 2.0.0 is affected by a known vulnerability. The following packages have a transitive dependency on paramiko and may be impacted: - cloudmesh-client 4.2.6 - codev =0.5.1a10, =0.7.4a3 Source cves: CVE-2026-44405 Source advisory: OSV:PYSEC-2026-2858...

boss-cli (>=1.0.0a20, <=1.0.1a1), ddwrt-tracker (>=0.0.1.dev33, <=0.0.1.dev34) +21 more potentially affected by CVE-2026-44405 via paramiko (2.4.2)

paramiko PYPI version 2.4.2 is affected by a known vulnerability. The following packages have a transitive dependency on paramiko and may be impacted: - boss-cli =1.0.0a20, =0.0.1.dev33, =0.4.11, =0.0.3, =0.8.2, =0.0.12, =0.7.0, =1.1.0, =0.0.1, =0.0.3, =0.0.19 and more Source cves: CVE-2026-44405...

acceldata-o2a (1.0.0), auto-qchem (>=0.1.1, <=1.2.6) +18 more potentially affected by CVE-2026-44405 via paramiko (3.1.0)

paramiko PYPI version 3.1.0 is affected by a known vulnerability. The following packages have a transitive dependency on paramiko and may be impacted: - acceldata-o2a 1.0.0 - auto-qchem =0.1.1, =0.63.0, =2.0.0, =1.0.0, =1.0.0, =2.0.1b0, =3.3.3, =3.5.0 - sailed-io 0.10.7 - ssh-mitm 4.0.0 and more...

aws-ml-helper (0.0.0), silverweasel (>=0.0.1, <=0.0.6) +1 more potentially affected by CVE-2026-44405 via paramiko (2.4.0)

paramiko PYPI version 2.4.0 is affected by a known vulnerability. The following packages have a transitive dependency on paramiko and may be impacted: - aws-ml-helper 0.0.0 - silverweasel =0.0.1, =0.0.6 - usine 0.1.0 Source cves: CVE-2026-44405 Source advisory: OSV:PYSEC-2026-2858...

add-juniper-software (>=1.0.1, <=1.0.3), alom-exporter (>=0.0.2, <=0.0.7) +52 more potentially affected by CVE-2026-44405 via paramiko (2.7.2)

paramiko PYPI version 2.7.2 is affected by a known vulnerability. The following packages have a transitive dependency on paramiko and may be impacted: - add-juniper-software =1.0.1, =0.0.2, =0.2.0, =0.1.0rc3, =1.1.591, =0.7.8, =0.8.0, =0.1.3, =1.1529.0, =1.1698.0 - hint-cli 0.11.0 and more Source...

cloudmesh-client (>=4.3.2, <=4.4.0) potentially affected by CVE-2026-44405 via paramiko (2.0.1)

paramiko PYPI version 2.0.1 is affected by a known vulnerability. The following packages have a transitive dependency on paramiko and may be impacted: - cloudmesh-client =4.3.2, =4.4.0 Source cves: CVE-2026-44405 Source advisory: OSV:PYSEC-2026-2858...

Security update for python-paramiko (moderate)

openSUSE security update: security update for python-paramiko ------------------------------------------------------------- Announcement ID: openSUSE-SU-2026:21127-1 Rating: moderate References: bsc1264225 Cross-References: CVE-2026-44405 CVSS scores: CVE-2026-44405 SUSE : 4.8...

OPENSUSE-SU-2026:21127-1 Security update for python-paramiko

This update for python-paramiko fixes the following issue - CVE-2026-44405: data integrity compromise due to allowed SHA-1 algorithm use bsc1264225...

CVE-2026-44405 vulnerabilities

Vulnerabilities for packages: keep, py3-paramiko, openstack-nova-2026.1, authentik, nemo, pgadmin4, superset, datadog-agent-fips, datadog-agent, superset-fips, keep-fips, duplicity, authentik-fips, airflow, az...

antelop (>=0.1.0, <=0.1.11), aviatrix-testlibs (>=0.0.1, <=0.11.5) +33 more potentially affected by CVE-2026-44405 via paramiko (3.3.1)

paramiko PYPI version 3.3.1 is affected by a known vulnerability. The following packages have a transitive dependency on paramiko and may be impacted: - antelop =0.1.0, =0.0.1, =0.3.0, =51.9.7, =1.0.0, =1.0.0, =0.1.0, =0.6.0a0, =4.2.0, =8.6.10, =0.0.0a0, =0.0.2, =0.5.0 - lemur 1.6.0 and more Sour...

cloudmesh-client (>=4.3.2, <=4.4.0) potentially affected by CVE-2026-44405 via paramiko (2.0.1)

paramiko PYPI version 2.0.1 is affected by a known vulnerability. The following packages have a transitive dependency on paramiko and may be impacted: - cloudmesh-client =4.3.2, =4.4.0 Source cves: CVE-2026-44405 Source advisory: OSV:GHSA-R374-RXX8-8654...

proxmox-pci-switcher (>=0.10.12, <=0.12.0), supercharged-cli (>=0.0.1, <=0.0.11) potentially affected by CVE-2026-44405 via paramiko (2.10.2)

paramiko PYPI version 2.10.2 is affected by a known vulnerability. The following packages have a transitive dependency on paramiko and may be impacted: - proxmox-pci-switcher =0.10.12, =0.0.1, =0.0.11 Source cves: CVE-2026-44405 Source advisory: OSV:GHSA-R374-RXX8-8654...

cstar (>=0.7.0, <=0.7.1) potentially affected by CVE-2026-44405 via paramiko (2.3.2)

paramiko PYPI version 2.3.2 is affected by a known vulnerability. The following packages have a transitive dependency on paramiko and may be impacted: - cstar =0.7.0, =0.7.1 Source cves: CVE-2026-44405 Source advisory: OSV:GHSA-R374-RXX8-8654...