CRITICAL9.8PyPI
GHSA-232r-66cg-79px· CVE-2018-7750, PYSEC-2018-19Paramiko not properly checking authentication before processing other requests
Modified: 6/9/2026
package
PyPI/paramiko
pkg:pypi/paramiko
HIGH8.8PyPI
GHSA-f2j6-wrhh-v25m· CVE-2018-1000805, PYSEC-2018-69Paramiko Authentication Bypass vulnerability
Modified: 10/9/2024
MEDIUM5.9PyPI
GHSA-f8q4-jwww-x3wv· CVE-2022-24302, PYSEC-2022-166Race Condition in Paramiko
Modified: 12/20/2025
LOW3.4PyPI
GHSA-r374-rxx8-8654· CVE-2026-44405, PYSEC-2026-2858Paramiko rsakey.py allows the SHA-1 algorithm
Modified: 9/10/2026
MEDIUM6.5PyPI
GHSA-wqmm-q65g-2hqr· CVE-2008-0299, PYSEC-2008-8Paramiko Unsafe randomness usage may allow access to sensitive information
Modified: 10/8/2024
—PyPI
PYSEC-2008-8· CVE-2008-0299, GHSA-wqmm-q65g-2hqrModified: 6/10/2026
—PyPI
PYSEC-2018-19· CVE-2018-7750, GHSA-232r-66cg-79pxModified: 6/8/2026
—PyPI
PYSEC-2018-69· CVE-2018-1000805, GHSA-f2j6-wrhh-v25mModified: 11/8/2023
—PyPI
PYSEC-2022-166· CVE-2022-24302, GHSA-f8q4-jwww-x3wvModified: 11/8/2023
MEDIUM5.9PyPI
PYSEC-2026-1758· CVE-2023-48795, GHSA-45x7-px36-x8w8Prefix Truncation Attack against ChaCha20-Poly1305 and Encrypt-then-MAC aka Terrapin
Modified: 7/7/2026
LOW3.4PyPI
PYSEC-2026-2858· CVE-2026-44405, GHSA-r374-rxx8-8654Paramiko rsakey.py allows the SHA-1 algorithm
Modified: 7/13/2026
MEDIUM5.9crates.ioGoPyPI
GHSA-45x7-px36-x8w8· CVE-2023-48795, GO-2023-2402Prefix Truncation Attack against ChaCha20-Poly1305 and Encrypt-then-MAC aka Terrapin
Modified: 9/10/2026