Paramiko rsakey.py allows the SHA-1 algorithm

Description

References

• nvd.nist.gov/vuln/detail/CVE-2026-44405 · ADVISORY
• paramiko/paramiko commit a448945 · WEB
• paramiko/paramiko · PACKAGE
• ostif.org/wp-content/uploads/2026/05/25-11-2415-REP_paramiko-security-audit_v1.1.pdf · WEB
• pypi.org/project/paramiko · PACKAGE
• GitHub Advisory GHSA-r374-rxx8-8654 · ADVISORY

paramiko 的其他漏洞

• CVE-2023-48795中危 5.9The SSH transport protocol with certain OpenSSH extensions, found in OpenSSH before 9.6 and other products, allows remote attackers to bypas…
• CVE-2022-24302中危 5.9In Paramiko before 2.10.1, a race condition (between creation and chmod) in the write_private_key_file function could allow unauthorized inf…
• CVE-2018-1000805高危 8.8Paramiko version 2.4.1, 2.3.2, 2.2.3, 2.1.5, 2.0.8, 1.18.5, 1.17.6 contains a Incorrect Access Control vulnerability in SSH server that can …
• CVE-2018-7750严重 9.8transport.py in the SSH server implementation of Paramiko before 1.17.6, 1.18.x before 1.18.5, 2.0.x before 2.0.8, 2.1.x before 2.1.5, 2.2.x…
• CVE-2008-0299中危 4.3common.py in Paramiko 1.7.1 and earlier, when using threads or forked processes, does not properly use RandomPool, which allows one session …