medium5.3
CVE-2026-38974
Dulwich through 1.1.0 was found to be missing SSH host key verification in contrib/paramiko_vendor.py.
Impact
Dulwich through 1.1.0 was found to be missing SSH host key verification in contrib/paramiko_vendor.py.
Affected products
| Product | Affected versions |
|---|---|
| Dulwich | through 1.1.0 |
Versions were read from the advisory text. No structured product data has been published for this record yet.