[{"data":1,"prerenderedAt":-1},["ShallowReactive",2],{"repo-stars":3,"vuln-CVE-2026-44405":6},{"stargazers_count":4,"fetched_at":5},7,"2026-08-01T00:21:03.480Z",{"id":7,"descriptions":8,"cisa":9,"weaknesses":10,"exploits":134,"aliases":135,"duplicate_of":9,"upstream":138,"downstream":139,"duplicates":154,"related":155,"reserved_at":9,"published_at":163,"modified_at":164,"state":165,"summary":166,"references_raw":174,"kevs":204,"epss":205,"epss_history":208,"metrics":368,"affected":378},"CVE-2026-44405","In Paramiko through 4.0.0 before a448945, rsakey.py allows the SHA-1 algorithm.",null,[11],{"_key":12,"id":12,"name":13,"description":14,"type":15,"status":16,"abstraction":17,"likelihood_of_exploit":18,"capec":19},"CWE-327","Use of a Broken or Risky Cryptographic Algorithm","The product uses a broken or risky cryptographic algorithm or protocol.","weakness","Draft","Class","High",[20,24,28,118,122,126,130],{"id":21,"name":22,"techniques":23},"CAPEC-20","Encryption Brute Forcing",[],{"id":25,"name":26,"techniques":27},"CAPEC-459","Creating a Rogue Certification Authority Certificate",[],{"id":29,"name":30,"techniques":31},"CAPEC-473","Signature Spoof",[32,109],{"id":33,"name":34,"tactics":35,"countermeasures":42},"T1036.001","Invalid Code Signature",[36,39],{"id":37,"name":38},"TA0030","Defense Evasion",{"id":40,"name":41},"TA0005","Stealth",[43,48,52,56,60,65,70,75,80,85,89,93,97,101,105],{"id":44,"name":45,"tactic":46},"D3-FA","File Analysis",{"name":47},"Detect",{"id":49,"name":50,"tactic":51},"D3-FIM","File Integrity Monitoring",{"name":47},{"id":53,"name":54,"tactic":55},"D3-DA","Dynamic Analysis",{"name":47},{"id":57,"name":58,"tactic":59},"D3-EFA","Emulated File Analysis",{"name":47},{"id":61,"name":62,"tactic":63},"D3-FEV","File Eviction",{"name":64},"Evict",{"id":66,"name":67,"tactic":68},"D3-DF","Decoy File",{"name":69},"Deceive",{"id":71,"name":72,"tactic":73},"D3-FE","File Encryption",{"name":74},"Harden",{"id":76,"name":77,"tactic":78},"D3-RF","Restore File",{"name":79},"Restore",{"id":81,"name":82,"tactic":83},"D3-CF","Content Filtering",{"name":84},"Isolate",{"id":86,"name":87,"tactic":88},"D3-LFP","Local File Permissions",{"name":84},{"id":90,"name":91,"tactic":92},"D3-RFAM","Remote File Access Mediation",{"name":84},{"id":94,"name":95,"tactic":96},"D3-CQ","Content Quarantine",{"name":84},{"id":98,"name":99,"tactic":100},"D3-CM","Content Modification",{"name":84},{"id":102,"name":103,"tactic":104},"D3-EAL","Executable Allowlisting",{"name":84},{"id":106,"name":107,"tactic":108},"D3-EDL","Executable Denylisting",{"name":84},{"id":110,"name":111,"tactics":112,"countermeasures":117},"T1553.002","Code Signing",[113,114],{"id":37,"name":38},{"id":115,"name":116},"TA0112","Defense Impairment",[],{"id":119,"name":120,"techniques":121},"CAPEC-475","Signature Spoofing by Improper Validation",[],{"id":123,"name":124,"techniques":125},"CAPEC-608","Cryptanalysis of Cellular Encryption",[],{"id":127,"name":128,"techniques":129},"CAPEC-614","Rooting SIM Cards",[],{"id":131,"name":132,"techniques":133},"CAPEC-97","Cryptanalysis",[],[],[136,137],"GHSA-r374-rxx8-8654","PYSEC-2026-2858",[],[140,142,144,146,148,150,152],{"_key":141},"UBUNTU-CVE-2026-44405",{"_key":143},"OPENSUSE-SU-2026:11025-1",{"_key":145},"DEBIAN-CVE-2026-44405",{"_key":147},"SUSE-SU-2026:22192-1",{"_key":149},"OPENSUSE-SU-2026:21127-1",{"_key":151},"SUSE-SU-2026:3031-1",{"_key":153},"SUSE-SU-2026:3093-1",[],[156,157,158,159,160,161],{"_key":143},{"_key":147},{"_key":149},{"_key":151},{"_key":153},{"_key":162},"CGA-H6W8-W4HM-RR8P","2026-05-05T23:50:52.811Z","2026-05-06T12:54:17.468Z","Awaiting Analysis",{"cisa_kev":167,"cisa_ransomware":167,"cisa_vendor":9,"epss_severity":168,"epss_score":169,"severity":168,"severity_score":170,"severity_version":171,"severity_source":172,"severity_vector":173,"severity_status":165},false,"low",0.00114,3.4,"v3.1","cve.org","CVSS:3.1/AV:A/AC:H/PR:N/UI:N/S:C/C:N/I:L/A:N",[175,182,186,191,196,200],{"url":176,"sources":177,"tags":180},"https://github.com/paramiko/paramiko/commit/a4489456b6f65281e172380cc4826cee5e851dbb",[172,178,179],"nvd","osv_pypi",[181],"WEB",{"url":183,"sources":184,"tags":185},"https://ostif.org/wp-content/uploads/2026/05/25-11-2415-REP_paramiko-security-audit_v1.1.pdf",[172,178,179],[181],{"url":187,"sources":188,"tags":189},"https://nvd.nist.gov/vuln/detail/CVE-2026-44405",[179],[190],"Advisory",{"url":192,"sources":193,"tags":194},"https://github.com/paramiko/paramiko",[179],[195],"PACKAGE",{"url":197,"sources":198,"tags":199},"https://pypi.org/project/paramiko",[179],[195],{"url":201,"sources":202,"tags":203},"https://github.com/advisories/GHSA-r374-rxx8-8654",[179],[190],[],{"date":206,"score":169,"percentile":207},"2026-07-05",0.01733,[209,213,216,218,222,225,228,231,233,235,238,240,242,244,246,248,251,254,256,259,261,263,266,269,272,275,278,280,283,285,288,290,293,296,299,302,304,307,310,312,314,317,320,323,326,328,331,334,337,340,342,345,348,350,353,355,357,359,362,364,367],{"date":210,"score":211,"percentile":212},"2026-05-06",0.00005,0.00221,{"date":214,"score":211,"percentile":215},"2026-05-07",0.00222,{"date":217,"score":211,"percentile":215},"2026-05-08",{"date":219,"score":220,"percentile":221},"2026-05-09",0.00004,0.00178,{"date":223,"score":220,"percentile":224},"2026-05-10",0.00177,{"date":226,"score":220,"percentile":227},"2026-05-11",0.00154,{"date":229,"score":220,"percentile":230},"2026-05-12",0.00152,{"date":232,"score":220,"percentile":230},"2026-05-13",{"date":234,"score":220,"percentile":230},"2026-05-14",{"date":236,"score":220,"percentile":237},"2026-05-15",0.00153,{"date":239,"score":220,"percentile":237},"2026-05-16",{"date":241,"score":220,"percentile":237},"2026-05-17",{"date":243,"score":220,"percentile":237},"2026-05-18",{"date":245,"score":220,"percentile":237},"2026-05-19",{"date":247,"score":220,"percentile":227},"2026-05-20",{"date":249,"score":220,"percentile":250},"2026-05-21",0.00155,{"date":252,"score":220,"percentile":253},"2026-05-22",0.00159,{"date":255,"score":220,"percentile":253},"2026-05-23",{"date":257,"score":220,"percentile":258},"2026-05-24",0.00158,{"date":260,"score":220,"percentile":258},"2026-05-25",{"date":262,"score":220,"percentile":258},"2026-05-26",{"date":264,"score":220,"percentile":265},"2026-05-27",0.00203,{"date":267,"score":220,"percentile":268},"2026-05-28",0.00204,{"date":270,"score":220,"percentile":271},"2026-05-29",0.00207,{"date":273,"score":220,"percentile":274},"2026-05-30",0.00211,{"date":276,"score":220,"percentile":277},"2026-05-31",0.0021,{"date":279,"score":220,"percentile":271},"2026-06-01",{"date":281,"score":220,"percentile":282},"2026-06-02",0.00208,{"date":284,"score":220,"percentile":277},"2026-06-03",{"date":286,"score":220,"percentile":287},"2026-06-04",0.00209,{"date":289,"score":220,"percentile":282},"2026-06-05",{"date":291,"score":211,"percentile":292},"2026-06-06",0.0031,{"date":294,"score":211,"percentile":295},"2026-06-07",0.00304,{"date":297,"score":211,"percentile":298},"2026-06-08",0.00303,{"date":300,"score":211,"percentile":301},"2026-06-09",0.00302,{"date":303,"score":211,"percentile":301},"2026-06-10",{"date":305,"score":211,"percentile":306},"2026-06-11",0.00301,{"date":308,"score":211,"percentile":309},"2026-06-12",0.003,{"date":311,"score":211,"percentile":306},"2026-06-13",{"date":313,"score":211,"percentile":295},"2026-06-14",{"date":315,"score":169,"percentile":316},"2026-06-15",0.01746,{"date":318,"score":169,"percentile":319},"2026-06-16",0.01747,{"date":321,"score":169,"percentile":322},"2026-06-17",0.01752,{"date":324,"score":169,"percentile":325},"2026-06-18",0.01749,{"date":327,"score":169,"percentile":316},"2026-06-19",{"date":329,"score":169,"percentile":330},"2026-06-20",0.01745,{"date":332,"score":169,"percentile":333},"2026-06-21",0.01743,{"date":335,"score":169,"percentile":336},"2026-06-22",0.01742,{"date":338,"score":169,"percentile":339},"2026-06-23",0.01737,{"date":341,"score":169,"percentile":339},"2026-06-24",{"date":343,"score":169,"percentile":344},"2026-06-25",0.01738,{"date":346,"score":169,"percentile":347},"2026-06-26",0.0174,{"date":349,"score":169,"percentile":330},"2026-06-27",{"date":351,"score":169,"percentile":352},"2026-06-28",0.01741,{"date":354,"score":169,"percentile":352},"2026-06-29",{"date":356,"score":169,"percentile":316},"2026-06-30",{"date":358,"score":169,"percentile":330},"2026-07-01",{"date":360,"score":169,"percentile":361},"2026-07-02",0.01744,{"date":363,"score":169,"percentile":336},"2026-07-03",{"date":365,"score":169,"percentile":366},"2026-07-04",0.01739,{"date":206,"score":169,"percentile":207},[369,374,376],{"source":172,"cvss_v2_0":9,"cvss_v3_0":9,"cvss_v3_1":370,"cvss_v4_0":9},{"baseScore":170,"baseSeverity":371,"vectorString":173,"impactScore":372,"exploitabilityScore":373},"LOW",2.3,4.1,{"source":178,"cvss_v2_0":9,"cvss_v3_0":9,"cvss_v3_1":375,"cvss_v4_0":9},{"baseScore":170,"baseSeverity":371,"vectorString":173,"impactScore":372,"exploitabilityScore":373},{"source":179,"cvss_v2_0":9,"cvss_v3_0":9,"cvss_v3_1":377,"cvss_v4_0":9},{"baseScore":170,"baseSeverity":9,"vectorString":173,"impactScore":372,"exploitabilityScore":373},[379,388],{"ecosystem":9,"name":380,"vendor":380,"product":380,"cpe_part":381,"purl_type":9,"purl_namespace":9,"purl_name":9,"source":9,"versions":382},"paramiko","a",[383],{"version":384,"is_range":385,"range_type":172,"version_start":9,"version_start_type":9,"version_end":386,"version_end_type":387,"fixed_in":9},"\u003C a4489456b6f65281e172380cc4826cee5e851dbb",true,"a4489456b6f65281e172380cc4826cee5e851dbb","excluding",{"ecosystem":389,"name":380,"vendor":389,"product":380,"cpe_part":9,"purl_type":390,"purl_namespace":9,"purl_name":380,"source":9,"versions":391},"PyPI","pypi",[392],{"version":393,"is_range":385,"range_type":394,"version_start":9,"version_start_type":9,"version_end":395,"version_end_type":396,"fixed_in":9},"lte4_0_0","ecosystem","4.0.0","including"]