paramiko vulnerabilities
CVEs whose affected-version data names the paramiko package (pip, rust). Each record lists the affected and patched versions; check a specific version with the dependency checker or POST /api/sbom.
2 CVEsRSS
CVE-2026-44405Low· 3.4Paramiko rsakey.py allows the SHA-1 algorithm
Paramiko rsakey.py allows the SHA-1 algorithm
▾ Sunlitparamiko · paramikoEPSS 0.11%via OSV
CVE-2023-48795Medium· 5.9PoCPrefix Truncation Attack against ChaCha20-Poly1305 and Encrypt-then-MAC aka Terrapin
Prefix Truncation Attack against ChaCha20-Poly1305 and Encrypt-then-MAC aka Terrapin
▾ Twilightrussh · russhEPSS 93%via OSV