GitHub Advisoryadvisory · PyPI

GHSA-r374-rxx8-8654 Paramiko rsakey.py allows the SHA-1 algorithm

LOW Published 2026-05-06 Modified 2026-05-08 Official page ↗

Aliases: CVE-2026-44405
Ecosystem: PyPI
Packages: paramiko
Severity: Low
CVSS vector: CVSS:3.1/AV:A/AC:H/PR:N/UI:N/S:C/C:N/I:L/A:N
Weaknesses: CWE-327
Reviewed: 2026-05-08

Affected packages

• PyPI paramiko: <= 4.0.0 (no fix yet)

Description

In Paramiko through 4.0.0 before a448945, rsakey.py allows the SHA-1 algorithm.

Related

Alias · CVE (1)

CVE-2026-44405 In Paramiko through 4.0.0 before a448945, rsakey.py allows the SHA-1 algorithm. vulnerability

Weakness · CWE (1)

CWE-327 Use of a Broken or Risky Cryptographic Algorithm weakness

References