TI-2026-32349 CVE-2026-44405 · GHSA-r374-rxx8-8654
In Paramiko through 4.0.0 before a448945, rsakey.py allows the SHA-1 algorithm.
Priority LOW 15
In Paramiko through 4.0.0 before a448945, rsakey.py allows the SHA-1 algorithm.
Vulnerabilities
5 records
TI-2023-26623 CVE-2023-48795 · GHSA-45x7-px36-x8w8
The SSH transport protocol with certain OpenSSH extensions, found in OpenSSH before 9.6…
Priority HIGH 70
The SSH transport protocol with certain OpenSSH extensions, found in OpenSSH before 9.6 and other products, allows remote attackers to bypass integrity checks such that some packets are omitted (from the extension negoti…
TI-2022-08183 CVE-2022-24302 · GHSA-f8q4-jwww-x3wv
In Paramiko before 2.10.1, a race condition (between creation and chmod) in the…
Priority LOW 31
In Paramiko before 2.10.1, a race condition (between creation and chmod) in the write_private_key_file function could allow unauthorized information disclosure.
TI-2018-16030 CVE-2018-1000805 · GHSA-f2j6-wrhh-v25m
Paramiko version 2.4.1, 2.3.2, 2.2.3, 2.1.5, 2.0.8, 1.18.5, 1.17.6 contains a Incorrect…
Priority MEDIUM 45
Paramiko version 2.4.1, 2.3.2, 2.2.3, 2.1.5, 2.0.8, 1.18.5, 1.17.6 contains a Incorrect Access Control vulnerability in SSH server that can result in RCE.
TI-2018-05593 CVE-2018-7750 · GHSA-232r-66cg-79px
transport.py in the SSH server implementation of Paramiko before 1.17.6, 1.18.x before…
Priority MEDIUM 64
transport.py in the SSH server implementation of Paramiko before 1.17.6, 1.18.x before 1.18.5, 2.0.x before 2.0.8, 2.1.x before 2.1.5, 2.2.x before 2.2.3, 2.3.x before 2.3.2, and 2.4.x before 2.4.1 does not properly chec…