PA
Product
Paramiko
5
CVEs
0
On KEV
9.8
Max CVSS
0
New 30D
Severity mix
Critical 1High 1Medium 2Low 1
Watch
Add Paramiko to your stack to get only the CVEs that touch what you run.
| CVE | CVSS | Published | Summary · affected versions |
|---|---|---|---|
| CVE-2018-7750 | 9.8 | Mar 13 | transport.py in the SSH server implementation of Paramiko before 1.17.6, 1.18.x before 1.18.5, 2.0.x before 2.0.8, 2.1.x before 2.1.5, 2.2.x before 2.2.3, 2.3.x before 2.3.2, and… Affected: before 1.17.6; 1.18.0 before 1.18.5; 2.0.0 before 2.0.8; 2.1.0 before 2.1.5; 2.2.0 before 2.2.3; 2.3.0 before 2.3.2; +1 more |
| CVE-2018-1000805 | 8.8 | Oct 8 | Paramiko version 2.4.1, 2.3.2, 2.2.3, 2.1.5, 2.0.8, 1.18.5, 1.17.6 contains a Incorrect Access Control vulnerability in SSH server that can result in RCE Affected: 1.17.6; 1.18.5; 2.0.8; 2.1.5; 2.2.3; 2.3.2; +1 more |
| CVE-2023-48795 | 5.9 | Dec 18 | The SSH transport protocol with certain OpenSSH extensions, found in OpenSSH before 9.6 and other products, allows remote attackers to bypass integrity checks such that some… Affected: before 3.4.0 |
| CVE-2022-24302 | 5.9 | Mar 17 | In Paramiko before 2.10.1, a race condition (between creation and chmod) in the write_private_key_file function could allow unauthorized information disclosure Affected: before 2.10.1 |
| CVE-2026-44405 | 3.4 | May 5 | In Paramiko through 4.0.0 before a448945, rsakey.py allows the SHA-1 algorithm Affected: before a4489456b6f65281e172380cc4826cee5e851dbb |
Showing 5