604 matches found
ROOT-APP-PYPI-CVE-2023-48795 CVE-2023-48795 in rootio-paramiko - Patched by Root
Root has patched CVE-2023-48795 in the rootio-paramiko package for Root:PyPI. Multiple fixed versions available...
Security update for python-paramiko (moderate)
openSUSE security update: security update for python-paramiko ------------------------------------------------------------- Announcement ID: openSUSE-SU-2026:21127-1 Rating: moderate References: bsc1264225 Cross-References: CVE-2026-44405 CVSS scores: CVE-2026-44405 SUSE : 4.8...
SUSE SLES16 Security Update : python-paramiko (SUSE-SU-2026:22192-1)
The remote SUSE Linux SLES16 / SLESSAP16 host has packages installed that are affected by a vulnerability as referenced in the SUSE-SU-2026:22192-1 advisory. This update for python-paramiko fixes the following issue - CVE-2026-44405: data integrity compromise due to allowed SHA-1 algorithm use...
SUSE-SU-2026:22192-1 Security update for python-paramiko
This update for python-paramiko fixes the following issue - CVE-2026-44405: data integrity compromise due to allowed SHA-1 algorithm use bsc1264225...
OPENSUSE-SU-2026:21127-1 Security update for python-paramiko
This update for python-paramiko fixes the following issue - CVE-2026-44405: data integrity compromise due to allowed SHA-1 algorithm use bsc1264225...
python311-paramiko-5.0.0-1.1 on GA media (moderate)
python311-paramiko-5.0.0-1.1 on GA media Announcement ID: openSUSE-SU-2026:11025-1 Rating: moderate Cross-References: CVE-2018-1000805 CVE-2018-7750 CVE-2026-44405 CVSS scores: CVE-2018-1000805 SUSE : 9.8 CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H CVE-2018-7750 SUSE : 10...
OPENSUSE-SU-2026:11025-1 python311-paramiko-5.0.0-1.1 on GA media
These are all security issues fixed in the python311-paramiko-5.0.0-1.1 package on the GA media of openSUSE Tumbleweed...
CVE-2026-45361 Apache Airflow Google provider: SSH host key verification disabled in ComputeEngineSSHHook (paramiko AutoAddPolicy default)
Apache Airflow providers-google's ComputeEngineSSHHook disables SSH host-key verification by default, exposing SSH traffic between an Airflow worker and a Compute Engine VM to in-path network attackers who can intercept or modify the session. Users are advised to upgrade to...
Unity Linux 20.1050e / 20.1060e / 20.1070e Security Update: python-paramiko (UTSA-2026-016596)
The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-016596 advisory. In Paramiko before 2.10.1, a race condition between creation and chmod in the writeprivatekeyfile function could allow unauthorized information disclosure. Tenable h...
Security Bulletin: Storage Virtualize Ansible Collection is affected by a vulnerability in the paramiko package
Summary Storage Virtualize Ansible Collection uses the paramiko package to provide common ssh capability. paramiko-4.0.0-py3-none-any.whl is vulnerable to CVE-2026-44405. Vulnerability Details CVEID:CVE-2026-44405 DESCRIPTION: In Paramiko through 4.0.0 before a448945, rsakey.py allows the SHA-1...
Unity Linux 20.1050e / 20.1060e / 20.1070e Security Update: python-paramiko (UTSA-2026-017484)
The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-017484 advisory. Paramiko version 2.4.1, 2.3.2, 2.2.3, 2.1.5, 2.0.8, 1.18.5, 1.17.6 contains a Incorrect Access Control vulnerability in SSH server that can result in RCE. This attac...
CVE-2026-44405 vulnerabilities
Vulnerabilities for packages: py3-paramiko, superset, az, airflow, datadog-agent...
GHSA-R374-RXX8-8654 vulnerabilities
Vulnerabilities for packages: py3-paramiko, superset, az, airflow, datadog-agent...
CVE-2026-44405 vulnerabilities
Vulnerabilities for packages: datadog-agent-fips, superset-fips, py3-paramiko, openstack-nova-2026.1, superset, authentik, az, nemo, keep, duplicity, datadog-agent, pgadmin4, authentik-fips, keep-fips, airflow...
GHSA-R374-RXX8-8654 vulnerabilities
Vulnerabilities for packages: datadog-agent-fips, superset-fips, py3-paramiko, openstack-nova-2026.1, superset, authentik, az, nemo, keep, duplicity, datadog-agent, pgadmin4, authentik-fips, keep-fips, airflow...
SUSE CVE-2026-44405
In Paramiko through 4.0.0 before a448945, rsakey.py allows the SHA-1 algorithm...
CVE-2026-44405
A flaw was found in Paramiko, a Python implementation of the SSHv2 protocol. The rsakey.py module allows the use of the SHA-1 cryptographic hash algorithm, which is known to have security weaknesses. An attacker on the same local network, with significant effort, could potentially exploit this to...
Use of a Broken or Risky Cryptographic Algorithm
Overview paramiko is a library for making SSH2 connections client or server. Affected versions of this package are vulnerable to Use of a Broken or Risky Cryptographic Algorithm in the RSA key handling by allowing the use of the SHA-1 algorithm. An attacker can compromise the integrity of...
