low3.4
CVE-2026-44405
In Paramiko through 4.0.0 before a448945, rsakey.py allows the SHA-1 algorithm.
Impact
In Paramiko through 4.0.0 before a448945, rsakey.py allows the SHA-1 algorithm.
Affected packages
| Ecosystem | Package | Affected | Fixed in |
|---|---|---|---|
| pip | paramiko | <= 4.0.0 | none recorded |
Weakness classification
References
- NVD record
- CVE.org record
- GitHub advisory
- https://github.com/advisories/GHSA-r374-rxx8-8654
- https://nvd.nist.gov/vuln/detail/CVE-2026-44405
- https://github.com/paramiko/paramiko/commit/a4489456b6f65281e172380cc4826cee5e851dbb
- https://ostif.org/wp-content/uploads/2026/05/25-11-2415-REP_paramiko-security-audit_v1.1.pdf