572 matches found
EUVD-2026-44852
Dulwich through 1.1.0 was found to be missing SSH host key verification in contrib/paramikovendor.py...
Linux Distros Unpatched Vulnerability : CVE-2026-38974
The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - Dulwich through 1.1.0 was found to be missing SSH host key verification in contrib/paramikovendor.py. CVE-2026-38974 Note that Nessus relies on the presence of...
CVE-2026-38974
Dulwich through 1.1.0 was found to be missing SSH host key verification in contrib/paramikovendor.py...
CVE-2026-38974
CVE-2026-38974 affects Dulwich up to 1.1.0, where the SSH host key verification is missing in contrib/paramiko_vendor.py. The flaw enables a remote attacker to impersonate a legitimate Git server during SSH connections, potentially exposing sensitive data or enabling code execution on the client....
PT-2026-60333
Name of the Vulnerable Software and Affected Versions Dulwich versions prior to 1.1.0 Description Dulwich fails to perform SSH host key verification within the contrib/paramiko vendor.py file. This lack of verification allows for potential man-in-the-middle attacks during SSH connections...
CVE-2026-38974
Dulwich through 1.1.0 was found to be missing SSH host key verification in contrib/paramikovendor.py...
SUSE-SU-2026:22192-1 Security update for python-paramiko
This update for python-paramiko fixes the following issue - CVE-2026-44405: data integrity compromise due to allowed SHA-1 algorithm use bsc1264225...
OPENSUSE-SU-2026:21127-1 Security update for python-paramiko
This update for python-paramiko fixes the following issue - CVE-2026-44405: data integrity compromise due to allowed SHA-1 algorithm use bsc1264225...
python311-paramiko-5.0.0-1.1 on GA media (moderate)
python311-paramiko-5.0.0-1.1 on GA media Announcement ID: openSUSE-SU-2026:11025-1 Rating: moderate Cross-References: CVE-2018-1000805 CVE-2018-7750 CVE-2026-44405 CVSS scores: CVE-2018-1000805 SUSE : 9.8 CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H CVE-2018-7750 SUSE : 10...
OPENSUSE-SU-2026:11025-1 python311-paramiko-5.0.0-1.1 on GA media
These are all security issues fixed in the python311-paramiko-5.0.0-1.1 package on the GA media of openSUSE Tumbleweed...
CVE-2026-45361 Apache Airflow Google provider: SSH host key verification disabled in ComputeEngineSSHHook (paramiko AutoAddPolicy default)
Apache Airflow providers-google's ComputeEngineSSHHook disables SSH host-key verification by default, exposing SSH traffic between an Airflow worker and a Compute Engine VM to in-path network attackers who can intercept or modify the session. Users are advised to upgrade to...
Unity Linux 20.1050e / 20.1060e / 20.1070e Security Update: python-paramiko (UTSA-2026-016596)
The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-016596 advisory. In Paramiko before 2.10.1, a race condition between creation and chmod in the writeprivatekeyfile function could allow unauthorized information disclosure. Tenable h...
Astra Linux – Vulnerability in Paramiko
In Paramiko before version 2.10.1, a race condition between the creation of the file and the chmod operation in the writeprivatekeyfile function could allow unauthorized information disclosure...
Security Bulletin: Storage Virtualize Ansible Collection is affected by a vulnerability in the paramiko package
Summary Storage Virtualize Ansible Collection uses the paramiko package to provide common ssh capability. paramiko-4.0.0-py3-none-any.whl is vulnerable to CVE-2026-44405. Vulnerability Details CVEID:CVE-2026-44405 DESCRIPTION: In Paramiko through 4.0.0 before a448945, rsakey.py allows the SHA-1...
Unity Linux 20.1050e / 20.1060e / 20.1070e Security Update: python-paramiko (UTSA-2026-017484)
The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-017484 advisory. Paramiko version 2.4.1, 2.3.2, 2.2.3, 2.1.5, 2.0.8, 1.18.5, 1.17.6 contains a Incorrect Access Control vulnerability in SSH server that can result in RCE. This attac...
CVE-2026-44405 vulnerabilities
Vulnerabilities for packages: superset, datadog-agent, py3-paramiko, airflow...
GHSA-R374-RXX8-8654 vulnerabilities
Vulnerabilities for packages: superset, datadog-agent, py3-paramiko, airflow...
GHSA-R374-RXX8-8654 vulnerabilities
Vulnerabilities for packages: openstack-nova-2026.1, nemo, pgadmin4, datadog-agent-fips, keep, py3-paramiko, superset, airflow, keep-fips, datadog-agent, duplicity...
