Vulnerabilities for paramiko

First version without a known vulnerability: 5.0.0

Details

• GHSA-r374-rxx8-86542026-05-06

  Paramiko rsakey.py allows the SHA-1 algorithm

• GHSA-45x7-px36-x8w82023-12-18

  Prefix Truncation Attack against ChaCha20-Poly1305 and Encrypt-then-MAC aka Terrapin

  Fixed in: 0.40.2, 0.17.0, 3.4.0, 0.0.0-20231218163308-9d2ee975ef9f

• GHSA-wqmm-q65g-2hqr2022-05-01

  Paramiko Unsafe randomness usage may allow access to sensitive information

  Fixed in: 1.7.1-3, 1.7.2

• GHSA-f8q4-jwww-x3wv2022-03-19

  Race Condition in Paramiko

  Fixed in: 2.10.1, 2.9.3

• GHSA-f2j6-wrhh-v25m2018-10-10

  Paramiko Authentication Bypass vulnerability

  Fixed in: 2.4.2, 2.3.3, 2.2.4, 2.1.6, 2.0.9

• GHSA-232r-66cg-79px2018-07-12

  Paramiko not properly checking authentication before processing other requests

  Fixed in: 2.0.8, 2.1.5, 2.2.3, 2.3.2, 2.4.1, 1.18.5, 1.17.6, fa29bd8446c8eab237f5187d28787727b4610516