Paramiko rsakey.py allows the SHA-1 algorithm

GHSA-r374-rxx8-8654 · CVE-2026-44405

Published May 6, 2026 · Modified May 9, 2026

AI SAST

Find this class of vulnerability in your own code

Corgea's AI-native static analysis detects vulnerabilities like this one across your repositories, ranks them by exploitability, and returns review-ready fixes.

Explore AI SAST Explore dependency scanning →

Description

In Paramiko through 4.0.0 before a448945, rsakey.py allows the SHA-1 algorithm.

References

ADVISORY https://nvd.nist.gov/vuln/detail/CVE-2026-44405
WEB https://github.com/paramiko/paramiko/commit/a4489456b6f65281e172380cc4826cee5e851dbb
PACKAGE https://github.com/paramiko/paramiko
WEB https://ostif.org/wp-content/uploads/2026/05/25-11-2415-REP_paramiko-security-audit_v1.1.pdf

Ready to move

Start Securing

Start for Free Get Demo

Free, no credit card | First findings in minutes

Paramiko rsakey.py allows the SHA-1 algorithm

Description

References

More PyPI vulnerabilities

Start Securing