Vulnerability GHSA-wqmm-q65g-2hqr
Advisory details are being prepared in the background.
Medium Risk
MEDIUM RISK
CVSS Score: 6.5
Score Range: 4.0–6.9
Medium severity vulnerabilities (CVSS 4.0–6.9). Important issues that meaningfully reduce security confidence.
4 years ago
May 01, 2022 at 11:28 PM UTC
Paramiko Unsafe randomness usage may allow access to sensitive information
1.0 and 1.1 and 1.2 and 1.3 and 1.3.1 and 1.4 and 1.5.1 - 1.5.2 and 1.5.4 and 1.6 and 1.6.1 - 1.6.4 and 1.7 and 1.7.1
1.0 and 1.1 and 1.2 and 1.3 and 1.3.1 and 1.4 and 1.5.1 - 1.5.2 and 1.5.4 and 1.6 and 1.6.1 - 1.6.4 and 1.7 and 1.7.1
Related Vulnerabilities
Other vulnerabilities affecting the same packages
Low Risk
3 months ago
Paramiko rsakey.py allows the SHA-1 algorithm
1.0 and 1.1 and 1.2 and 1.3 and 1.3.1 and 1.4 and 1.5.1 - 1.5.2 and 1.5.4 and 1.6 and 1.6.1 - 1.6.4 and 1.7 and 1.7.1 - 1.7.2 and 1.7.4 - 1.7.6 and 1.7.7.1 and 1.7.7.2 and 1.8.0 - 4.0.0 PYSEC-2026-2858
1.0 and 1.1 and 1.2 and 1.3 and 1.3.1 and 1.4 and 1.5.1 - 1.5.2 and 1.5.4 and 1.6 and 1.6.1 - 1.6.4 and 1.7 and 1.7.1 - 1.7.2 and 1.7.4 - 1.7.6 and 1.7.7.1 and 1.7.7.2 and 1.8.0 - 4.0.0 PYSEC-2026-2858
Medium Risk
4 months ago
Prefix Truncation Attack against ChaCha20-Poly1305 and Encrypt-then-MAC aka Terrapin
2.5.0 - 3.3.2 PYSEC-2026-1758
2.5.0 - 3.3.2 PYSEC-2026-1758
Low Risk
6 months ago
Paramiko rsakey.py allows the SHA-1 algorithm
1.0 and 1.1 and 1.2 and 1.3 and 1.3.1 and 1.4 and 1.5.1 - 1.5.2 and 1.5.4 and 1.6 and 1.6.1 - 1.6.4 and 1.7 and 1.7.1 - 1.7.2 and 1.7.4 - 1.7.6 and 1.7.7.1 and 1.7.7.2 and 1.8.0 - 4.0.0 GHSA-r374-rxx8-8654
1.0 and 1.1 and 1.2 and 1.3 and 1.3.1 and 1.4 and 1.5.1 - 1.5.2 and 1.5.4 and 1.6 and 1.6.1 - 1.6.4 and 1.7 and 1.7.1 - 1.7.2 and 1.7.4 - 1.7.6 and 1.7.7.1 and 1.7.7.2 and 1.8.0 - 4.0.0 GHSA-r374-rxx8-8654
Medium Risk
2 years ago
Prefix Truncation Attack against ChaCha20-Poly1305 and Encrypt-then-MAC aka Terrapin
2.5.0 - 3.3.2 GHSA-45x7-px36-x8w8
2.5.0 - 3.3.2 GHSA-45x7-px36-x8w8
Medium Risk
4 years ago
Race Condition in Paramiko
2.9.0 - 2.10.0 GHSA-f8q4-jwww-x3wv
2.9.0 - 2.10.0 GHSA-f8q4-jwww-x3wv
Impacted packages
Timeline
Published
4 years ago
May 01, 2022 at 11:28 PM UTC
Last Modified
2 years ago
October 08, 2024 at 01:23 PM UTC