Fluid Attacks Database

Description

Paramiko rsakey.py allows the SHA-1 algorithm In Paramiko through 4.0.0 before a448945, rsakey.py allows the SHA-1 algorithm.

Mitigation

Update Impact

Minimal update. May introduce new vulnerabilities or breaking changes.

Ecosystem	Component	Affected version	Patched versions
debian 13	paramiko	=3.5.1-3 \|\| =4.0.0-1 \|\| =4.0.0-2 \|\| =4.0.0-3 \|\| =4.0.0-4 \|\| =5.0.0-1	-
rpm rhel9	bootc-image-builder	-	-
pypi	paramiko	>=0 <=4.0.0	5.0.0
debian 14	paramiko	=3.5.1-3 \|\| =4.0.0-1 \|\| =4.0.0-2 \|\| =4.0.0-3 \|\| =4.0.0-4 \|\| =5.0.0-1	-
debian 12	paramiko	=2.12.0-2 \|\| =2.12.0-3 \|\| =3.4.0-1 \|\| =3.4.0-2 \|\| =3.4.1-1 \|\| =3.4.1-2 \|\| =3.5.0-1 \|\| =3.5.0-1~exp1 \|\| =3.5.1-1 \|\| =3.5.1-2 \|\| =3.5.1-3 \|\| =4.0.0-1 \|\| =4.0.0-2 \|\| =4.0.0-3 \|\| =4.0.0-4 \|\| =5.0.0-1	-

Aliases

References

Does your application use this vulnerable software?

During the free trial, our tools assess your application, identify vulnerabilities, and provide recommendations for their remediation.