Vulnerabilities

search
ID
Packages
Summary
Published
arrow_upward
Attributes
PYSEC-2026-1758
  • PyPI/paramiko
 Prefix Truncation Attack against ChaCha20-Poly1305 and Encrypt-then-MAC aka Terrapin yesterday
  • Fix available
  • Severity - 5.9 (Medium)
GHSA-r374-rxx8-8654
  • PyPI/paramiko
 Paramiko rsakey.py allows the SHA-1 algorithm 06 May
  • No fix available
  • Severity - 3.4 (Low)
GHSA-45x7-px36-x8w8
  • Go/golang.org/x/crypto
  • PyPI/paramiko
  • crates.io/russh
 Prefix Truncation Attack against ChaCha20-Poly1305 and Encrypt-then-MAC aka Terrapin 18 Dec 2023
  • Fix available
  • Severity - 5.9 (Medium)
GHSA-wqmm-q65g-2hqr
  • PyPI/paramiko
 Paramiko Unsafe randomness usage may allow access to sensitive information 01 May 2022
  • Fix available
  • Severity - 7.1 (High)
GHSA-f8q4-jwww-x3wv
  • PyPI/paramiko
 Race Condition in Paramiko 19 Mar 2022
  • Fix available
  • Severity - 8.2 (High)
PYSEC-2022-166
  • PyPI/paramiko
 See record for full details 17 Mar 2022
  • Fix available
GHSA-f2j6-wrhh-v25m
  • PyPI/paramiko
 Paramiko Authentication Bypass vulnerability 10 Oct 2018
  • Fix available
  • Severity - 8.7 (High)
PYSEC-2018-69
  • PyPI/paramiko
 See record for full details 08 Oct 2018
  • Fix available
GHSA-232r-66cg-79px
  • PyPI/paramiko
 Paramiko not properly checking authentication before processing other requests 12 Jul 2018
  • Fix available
  • Severity - 9.3 (Critical)
PYSEC-2018-19
  • PyPI/paramiko
  • github.com/paramiko/paramiko
 See record for full details 13 Mar 2018
  • Fix available
PYSEC-2008-8
  • PyPI/paramiko
 See record for full details 16 Jan 2008
  • Fix available