Vulnerability PYSEC-2026-2858
Advisory details are being prepared in the background.
Low Risk
LOW RISK
CVSS Score: 3.4
Score Range: < 4.0
Low severity vulnerabilities (CVSS < 4.0). Hygiene issues that can accumulate but pose lower immediate risk.
3 months ago
July 13, 2026 at 03:15 PM UTC
Paramiko rsakey.py allows the SHA-1 algorithm
1.0 and 1.1 and 1.2 and 1.3 and 1.3.1 and 1.4 and 1.5.1 - 1.5.2 and 1.5.4 and 1.6 and 1.6.1 - 1.6.4 and 1.7 and 1.7.1 - 1.7.2 and 1.7.4 - 1.7.6 and 1.7.7.1 and 1.7.7.2 and 1.8.0 - 4.0.0
1.0 and 1.1 and 1.2 and 1.3 and 1.3.1 and 1.4 and 1.5.1 - 1.5.2 and 1.5.4 and 1.6 and 1.6.1 - 1.6.4 and 1.7 and 1.7.1 - 1.7.2 and 1.7.4 - 1.7.6 and 1.7.7.1 and 1.7.7.2 and 1.8.0 - 4.0.0
Related Vulnerabilities
Other vulnerabilities affecting the same packages
Medium Risk
4 months ago
Prefix Truncation Attack against ChaCha20-Poly1305 and Encrypt-then-MAC aka Terrapin
2.5.0 - 3.3.2 PYSEC-2026-1758
2.5.0 - 3.3.2 PYSEC-2026-1758
Low Risk
6 months ago
Paramiko rsakey.py allows the SHA-1 algorithm
1.0 and 1.1 and 1.2 and 1.3 and 1.3.1 and 1.4 and 1.5.1 - 1.5.2 and 1.5.4 and 1.6 and 1.6.1 - 1.6.4 and 1.7 and 1.7.1 - 1.7.2 and 1.7.4 - 1.7.6 and 1.7.7.1 and 1.7.7.2 and 1.8.0 - 4.0.0 GHSA-r374-rxx8-8654
1.0 and 1.1 and 1.2 and 1.3 and 1.3.1 and 1.4 and 1.5.1 - 1.5.2 and 1.5.4 and 1.6 and 1.6.1 - 1.6.4 and 1.7 and 1.7.1 - 1.7.2 and 1.7.4 - 1.7.6 and 1.7.7.1 and 1.7.7.2 and 1.8.0 - 4.0.0 GHSA-r374-rxx8-8654
Medium Risk
2 years ago
Prefix Truncation Attack against ChaCha20-Poly1305 and Encrypt-then-MAC aka Terrapin
2.5.0 - 3.3.2 GHSA-45x7-px36-x8w8
2.5.0 - 3.3.2 GHSA-45x7-px36-x8w8
Medium Risk
4 years ago
Paramiko Unsafe randomness usage may allow access to sensitive information
1.0 and 1.1 and 1.2 and 1.3 and 1.3.1 and 1.4 and 1.5.1 - 1.5.2 and 1.5.4 and 1.6 and 1.6.1 - 1.6.4 and 1.7 and 1.7.1 GHSA-wqmm-q65g-2hqr
1.0 and 1.1 and 1.2 and 1.3 and 1.3.1 and 1.4 and 1.5.1 - 1.5.2 and 1.5.4 and 1.6 and 1.6.1 - 1.6.4 and 1.7 and 1.7.1 GHSA-wqmm-q65g-2hqr
Medium Risk
4 years ago
Race Condition in Paramiko
2.9.0 - 2.10.0 GHSA-f8q4-jwww-x3wv
2.9.0 - 2.10.0 GHSA-f8q4-jwww-x3wv
Impacted packages
Timeline
Published
3 months ago
July 13, 2026 at 03:15 PM UTC
Last Modified
3 months ago
July 13, 2026 at 04:32 PM UTC