VDB
KO
LOW 3.4

GHSA-r374-rxx8-8654

Paramiko rsakey.py allows the SHA-1 algorithm

Details

In Paramiko through 4.0.0 before a448945, rsakey.py allows the SHA-1 algorithm.

Are you affected?

Enter the version of the package you're using.

Affected packages

PyPI / paramiko
Introduced in: 0

No fixed version published yet for paramiko (pip). Pin to a known-safe version or switch to an alternative.

References