In Paramiko through 4.0.0 before a448945, rsakey.py allows the SHA-1 algorithm.
{
"severity": "LOW",
"cwe_ids": [
"CWE-327"
],
"nvd_published_at": "2026-05-06T00:16:04Z",
"github_reviewed_at": "2026-05-08T23:13:43Z",
"github_reviewed": true
}