CVE-2026-38974

The python-dulwich package (specifically versions through 1.1.0 ) is vulnerable because it lacks SSH host key verification in the contrib/paramiko_vendor.py component. This flaw can potentially allow for man-in-the-middle attacks during SSH connections. Remediation is available through various di...

ALPINE-CVE-2020-14002

PuTTY 0.68 through 0.73 has an Observable Discrepancy leading to an information leak in the algorithm negotiation. This allows man-in-the-middle attackers to target initial connection attempts where no host key for the server has been cached by the client...