Vulnerability GHSA-f8q4-jwww-x3wv
Advisory details are being prepared in the background.
Medium Risk
MEDIUM RISK
CVSS Score: 5.9
Score Range: 4.0–6.9
Medium severity vulnerabilities (CVSS 4.0–6.9). Important issues that meaningfully reduce security confidence.
4 years ago
March 19, 2022 at 12:01 AM UTC
Race Condition in Paramiko
2.9.0 - 2.10.0
2.9.0 - 2.10.0
Related Vulnerabilities
Other vulnerabilities affecting the same packages
Low Risk
3 months ago
Paramiko rsakey.py allows the SHA-1 algorithm
1.0 and 1.1 and 1.2 and 1.3 and 1.3.1 and 1.4 and 1.5.1 - 1.5.2 and 1.5.4 and 1.6 and 1.6.1 - 1.6.4 and 1.7 and 1.7.1 - 1.7.2 and 1.7.4 - 1.7.6 and 1.7.7.1 and 1.7.7.2 and 1.8.0 - 4.0.0 PYSEC-2026-2858
1.0 and 1.1 and 1.2 and 1.3 and 1.3.1 and 1.4 and 1.5.1 - 1.5.2 and 1.5.4 and 1.6 and 1.6.1 - 1.6.4 and 1.7 and 1.7.1 - 1.7.2 and 1.7.4 - 1.7.6 and 1.7.7.1 and 1.7.7.2 and 1.8.0 - 4.0.0 PYSEC-2026-2858
Medium Risk
4 months ago
Prefix Truncation Attack against ChaCha20-Poly1305 and Encrypt-then-MAC aka Terrapin
2.5.0 - 3.3.2 PYSEC-2026-1758
2.5.0 - 3.3.2 PYSEC-2026-1758
Low Risk
6 months ago
Paramiko rsakey.py allows the SHA-1 algorithm
1.0 and 1.1 and 1.2 and 1.3 and 1.3.1 and 1.4 and 1.5.1 - 1.5.2 and 1.5.4 and 1.6 and 1.6.1 - 1.6.4 and 1.7 and 1.7.1 - 1.7.2 and 1.7.4 - 1.7.6 and 1.7.7.1 and 1.7.7.2 and 1.8.0 - 4.0.0 GHSA-r374-rxx8-8654
1.0 and 1.1 and 1.2 and 1.3 and 1.3.1 and 1.4 and 1.5.1 - 1.5.2 and 1.5.4 and 1.6 and 1.6.1 - 1.6.4 and 1.7 and 1.7.1 - 1.7.2 and 1.7.4 - 1.7.6 and 1.7.7.1 and 1.7.7.2 and 1.8.0 - 4.0.0 GHSA-r374-rxx8-8654
Medium Risk
2 years ago
Prefix Truncation Attack against ChaCha20-Poly1305 and Encrypt-then-MAC aka Terrapin
2.5.0 - 3.3.2 GHSA-45x7-px36-x8w8
2.5.0 - 3.3.2 GHSA-45x7-px36-x8w8
Medium Risk
4 years ago
Paramiko Unsafe randomness usage may allow access to sensitive information
1.0 and 1.1 and 1.2 and 1.3 and 1.3.1 and 1.4 and 1.5.1 - 1.5.2 and 1.5.4 and 1.6 and 1.6.1 - 1.6.4 and 1.7 and 1.7.1 GHSA-wqmm-q65g-2hqr
1.0 and 1.1 and 1.2 and 1.3 and 1.3.1 and 1.4 and 1.5.1 - 1.5.2 and 1.5.4 and 1.6 and 1.6.1 - 1.6.4 and 1.7 and 1.7.1 GHSA-wqmm-q65g-2hqr
Impacted packages
Timeline
Published
4 years ago
March 19, 2022 at 12:01 AM UTC
Fixed (2.10.1)
4 years ago
March 12, 2022 at 04:23 AM UTC
Fixed (2.9.3)
4 years ago
March 18, 2022 at 09:01 PM UTC
Last Modified
10 months ago
December 20, 2025 at 03:08 AM UTC