pkg:PyPI/paramiko

All known vulnerabilities

• CRITICAL9.8CVE-2018-7750Paramiko not properly checking authentication before processing other requests
  >= 2.0.0, < 2.0.8
• CRITICAL9.8CVE-2018-7750Paramiko not properly checking authentication before processing other requests
  from 0, < fa29bd8446c8eab237f5187d28787727b4610516 | from 0, < 1.17.6, >= 2.0.0, < 2.0.8, >= 2.1.0, < 2.1.5, >= 2.2.0, < 2.2.3, >= 2.3.0, < 2.3.2, >= 1.18.0, < 1.18.5
• HIGH8.8CVE-2018-1000805paramiko - security update
  >= 1.5.1, < 2.0.9
• HIGH8.8CVE-2018-1000805paramiko - security update
  >= 2.4.0, < 2.4.2
• MEDIUM6.5CVE-2008-0299Paramiko Unsafe randomness usage may allow access to sensitive information
  from 0, < 1.7.1-3
• MEDIUM6.5CVE-2008-0299Paramiko Unsafe randomness usage may allow access to sensitive information
  from 0, < 1.7.2
• MEDIUM5.9CVE-2023-48795Prefix Truncation Attack against ChaCha20-Poly1305 and Encrypt-then-MAC aka Terrapin
  >= 2.5.0, < 3.4.0
• MEDIUM5.9CVE-2022-24302Race Condition in Paramiko
  from 0, < 2.9.3, >= 2.10.0, < 2.10.1
• MEDIUM5.9CVE-2022-24302Race Condition in Paramiko
  >= 2.10.0, < 2.10.1
• LOW3.4CVE-2026-44405Paramiko rsakey.py allows the SHA-1 algorithm
  from 0, <= 4.0.0