StackRadar

CVE-2026-44405

Low

Advisory

Published 6 May 2026In the index since 5 Sept 2026
Severity
Low
worst across findings
CVSS
3.4
base score, highest
EPSS
0.001
2nd percentile
CISA KEV
Not listed
no confirmed exploitation
Charts affected
256
of 17,781 indexed, latest versions
Container images
134
deployed by those charts
Fix available
None
affected packages

Paramiko rsakey.py allows the SHA-1 algorithm

Carried by container images the latest versions of 256 of 17,781 indexed charts deploy, on 134 images.

Affected packageAffected versionsFixed inImages
paramikopypi1.10.1, 2.1.2, 2.4.2, 2.6.0+17 moreno fix listed134
paramikodeb1.10.1-1git1ubuntu0.1no fix listed2
OSV records
GHSA-r374-rxx8-8654UBUNTU-CVE-2026-44405
Also known as
PYSEC-2026-2858

Charts affected

256 by stars
ChartLatestAffected imagesRadar Score
todolist-charttodolist-chart0.1.71 of 10See more

todolist-chart todolist-chart 0.1.7

1 of the 10 container images this version deploys carry CVE-2026-44405.

Container imageDigestPackageFixed in
library/mysql:8.07dcddc01f13b
paramiko@4.0.0
no fix listed

Open the chart page →

6,973
phonebook-chartusuladams2Verified publisher0.2.11 of 3See more

phonebook-chart usuladams2 0.2.1

1 of the 3 container images this version deploys carry CVE-2026-44405.

Container imageDigestPackageFixed in
library/mysql:5.74bc6bc963e6d
paramiko@2.11.0
no fix listed

Open the chart page →

3,176
simple-prima-notavcnngrVerified publisher0.5.31 of 4See more

simple-prima-nota vcnngr 0.5.3

1 of the 4 container images this version deploys carry CVE-2026-44405.

Container imageDigestPackageFixed in
dpage/pgadmin4:9.252cb72a9e3da
paramiko@3.5.1
no fix listed

Open the chart page →

4,768
pagesvictor-pages1.0.01 of 3See more

pages victor-pages 1.0.0

1 of the 3 container images this version deploys carry CVE-2026-44405.

Container imageDigestPackageFixed in
library/mysql:8.07dcddc01f13b
paramiko@4.0.0
no fix listed

Open the chart page →

20,190
pageswalter1.0.01 of 3See more

pages walter 1.0.0

1 of the 3 container images this version deploys carry CVE-2026-44405.

Container imageDigestPackageFixed in
library/mysql:8.07dcddc01f13b
paramiko@4.0.0
no fix listed

Open the chart page →

20,190
supersetwbstack0.1.01 of 1See more

superset wbstack 0.1.0

1 of the 1 container images this version deploys carry CVE-2026-44405.

Container imageDigestPackageFixed in
apache/superset:4.0.1ab9467fd712c
paramiko@3.4.0
no fix listed

Open the chart page →

7,085

Container images carrying it

134 by charts deploying them

A fixed version is listed for 0 of the 2 affected packages.

Container imageDigestPackageFixed inUsed by
dpage/pgadmin4:8.418cd5711fc9a
paramiko@3.4.0
no fix listed
1
dpage/pgadmin4:7.537946e4f3e7b
paramiko@3.2.0
no fix listed
1
dpage/pgadmin4:9.11.050700ac17936
paramiko@3.5.1
no fix listed
1
dpage/pgadmin4:9.252cb72a9e3da
paramiko@3.5.1
no fix listed
1
dpage/pgadmin4:8.13561c1f8f99f2
paramiko@3.5.0
no fix listed
1
dpage/pgadmin4:4.5a5a656e1d5fd
paramiko@2.4.2
no fix listed
1
dpage/pgadmin4:4.22b1f00b8163cf
paramiko@2.7.1
no fix listed
1
elastichq/elasticsearch-hq:latestbb3bd22c2b87
paramiko@2.6.0
no fix listed
1
evk02/mlflow:2.2.1ef6ff257ef35
paramiko@2.12.0
no fix listed
1
flanksource/batch-runner:v1.0.44689687a7cf95
paramiko@3.5.0
no fix listed
1
galaxy/cloudman-server:lateste5c265fe9fcd
paramiko@2.11.0
no fix listed
1
galaxy/galaxy-init:v18.010267bad550e6
paramiko@1.10.1-1git1ubuntu0.1
paramiko@1.10.1
no fix listed
no fix listed
1
galaxy/galaxy-stable:v18.018e577a626dfd
paramiko@1.10.1-1git1ubuntu0.1
paramiko@1.10.1
no fix listed
no fix listed
1
galaxy/pulsar-kubernetes:0.15.7e50a890e24c9
paramiko@3.5.1
no fix listed
1
helga09/my_sql_shoes:v1.1.1a03657d97897
paramiko@2.11.0
no fix listed
1
hhyo/archery:v1.9.11aa41843419e
paramiko@2.11.0
no fix listed
1
homeassistant/home-assistant:2023.10.3021e2afc6e57
paramiko@3.3.1
no fix listed
1
homeassistant/home-assistant:2026.75a531753cea9
paramiko@3.5.0
no fix listed
1
homeassistant/home-assistant:2023.12.48d000332b09b
paramiko@3.4.0
no fix listed
1
jmferrer/azure-devops-agent:latest030f68ec6998
paramiko@2.6.0
no fix listed
1
library/mysql:8.4.3106d5197fd8e
paramiko@3.4.0
no fix listed
1
library/mysql:8.4.113466ba4a4828
paramiko@4.0.0
no fix listed
1
library/mysql:8.0.303c1aab708f6e
paramiko@2.9.2
no fix listed
1
library/mysql:885b9bf2e29cf
paramiko@4.0.0
no fix listed
1
library/mysql:8.4.108dbcf531a03a
paramiko@4.0.0
no fix listed
1
library/mysql:9.0.192dc86967801
paramiko@3.4.0
no fix listed
1
library/mysql:8.0.41bf577825b52a
paramiko@3.4.0
no fix listed
1
library/mysql:8.0.39ccb8f749bb5e
paramiko@3.4.0
no fix listed
1
library/mysql:8.0.40d58ac93387f6
paramiko@3.4.0
no fix listed
1
linuxserver/couchpotato:75e576ee-ls389cd8d5fb1ac
paramiko@2.4.2
no fix listed
1
linuxserver/couchpotato:75e576ee-ls32c4d2766b9eb7
paramiko@2.7.1
no fix listed
1
linuxserver/sickchill:v2020.08.07-1-ls40e48b479c1891
paramiko@2.7.1
no fix listed
1
netboxcommunity/netbox:v3.2.83d652dca5351
paramiko@2.11.0
no fix listed
1
netboxcommunity/netbox:v3.7.8-2.8.09bf83b350a89
paramiko@3.4.0
no fix listed
1
networktocode/nautobot:3.0-py3.13ed484336b1ad
paramiko@4.0.0
no fix listed
1
nlmacamp/check_mk:latest5dbb8589f824
paramiko@2.1.2
no fix listed
1
omecproject/progran-synchronizer:comac-1.0.0d109a8e57e71
paramiko@2.4.2
no fix listed
1
openwhisk/ow-utils:1.0.0c80dba0de3aa
paramiko@2.7.2
no fix listed
1
prompve/prometheus-pve-exporter:3.8.2e3d501a82df5
paramiko@4.0.0
no fix listed
1
prompve/prometheus-pve-exporter:3.4.2fcf041f0c24d
paramiko@3.4.0
no fix listed
1
prompve/prometheus-pve-exporter:2.0.1ff6749eb03b0
paramiko@2.7.1
no fix listed
1
psono/psono-server:5.0.03b974b43ea03
paramiko@3.4.0
no fix listed
1
qichenxu4pd/mysqlweb:1.2d758d41d9c6b
paramiko@2.11.0
no fix listed
1
redash/redash:25.8.000d813437db5
paramiko@3.4.1
no fix listed
1
redash/redash:10.0.0.b503639392753c0376
paramiko@2.7.2
no fix listed
1
redash/redash:26.3.0c5c9148f5c38
paramiko@3.4.1
no fix listed
1
semaphoreui/semaphore:v2.9.645b50bc11833f
paramiko@3.1.0
no fix listed
1
stackstorm/st2actionrunner:3.888235ba70cad
paramiko@2.11.0
no fix listed
1
stackstorm/st2api:3.86f56d239d280
paramiko@2.11.0
no fix listed
1
stackstorm/st2auth:3.833ecfda16608
paramiko@2.11.0
no fix listed
1

syft 1.42.1 · advisories as of 14 Sept 2026

Corrections: contact@stackradar.io

Catalogue: Artifact Hub · Advisories: OSV · Exploitation: FIRST EPSS, CISA KEV.