Vulnerability GHSA-r374-rxx8-8654
Low Risk
LOW RISK
CVSS Score: 3.4
Score Range: < 4.0
Low severity vulnerabilities (CVSS < 4.0). Hygiene issues that can accumulate but pose lower immediate risk.
6 months ago
May 06, 2026 at 12:31 AM UTC
Paramiko rsakey.py allows the SHA-1 algorithm
1.0 - 4.0.0
1.0 - 4.0.0
Summary
Paramiko rsakey.py allows the SHA-1 algorithm
Details
In Paramiko through 4.0.0 before a448945, rsakey.py allows the SHA-1 algorithm.
Related Vulnerabilities
Other vulnerabilities affecting the same packages
Low Risk
3 months ago
Paramiko rsakey.py allows the SHA-1 algorithm
1.0 - 4.0.0 PYSEC-2026-2858
1.0 - 4.0.0 PYSEC-2026-2858
Medium Risk
4 months ago
Prefix Truncation Attack against ChaCha20-Poly1305 and Encrypt-then-MAC aka Terrapin
2.5.0 - 3.3.2 PYSEC-2026-1758
2.5.0 - 3.3.2 PYSEC-2026-1758
Medium Risk
2 years ago
Prefix Truncation Attack against ChaCha20-Poly1305 and Encrypt-then-MAC aka Terrapin
2.5.0 - 3.3.2 GHSA-45x7-px36-x8w8
2.5.0 - 3.3.2 GHSA-45x7-px36-x8w8
Medium Risk
4 years ago
Paramiko Unsafe randomness usage may allow access to sensitive information
1.0 - 1.7.1 GHSA-wqmm-q65g-2hqr
1.0 - 1.7.1 GHSA-wqmm-q65g-2hqr
Medium Risk
4 years ago
Race Condition in Paramiko
2.9.0 - 2.9.2 and 2.10.0 GHSA-f8q4-jwww-x3wv
2.9.0 - 2.9.2 and 2.10.0 GHSA-f8q4-jwww-x3wv
Impacted packages
Timeline
Published
6 months ago
May 06, 2026 at 12:31 AM UTC
Fixed (5.0.0)
6 months ago
May 09, 2026 at 06:28 PM UTC
Last Modified
15 hours ago
November 07, 2026 at 12:30 AM UTC