StackRadar

CVE-2026-44405

Low

Advisory

Published 6 May 2026In the index since 5 Sept 2026
Severity
Low
worst across findings
CVSS
3.4
base score, highest
EPSS
0.001
2nd percentile
CISA KEV
Not listed
no confirmed exploitation
Charts affected
256
of 17,781 indexed, latest versions
Container images
134
deployed by those charts
Fix available
None
affected packages

Paramiko rsakey.py allows the SHA-1 algorithm

Carried by container images the latest versions of 256 of 17,781 indexed charts deploy, on 134 images.

Affected packageAffected versionsFixed inImages
paramikopypi1.10.1, 2.1.2, 2.4.2, 2.6.0+17 moreno fix listed134
paramikodeb1.10.1-1git1ubuntu0.1no fix listed2
OSV records
GHSA-r374-rxx8-8654UBUNTU-CVE-2026-44405
Also known as
PYSEC-2026-2858

Charts affected

256 by stars
ChartLatestAffected imagesRadar Score
pgadmin4runixVerified publisher1.66.01 of 1See more

pgadmin4 runix 1.66.0

1 of the 1 container images this version deploys carry CVE-2026-44405.

Container imageDigestPackageFixed in
dpage/pgadmin4:9.172f4ce946ddf8
paramiko@3.5.1
no fix listed

Open the chart page →

398
airflowairflow-helmVerified publisher8.9.01 of 4See more

airflow airflow-helm 8.9.0

1 of the 4 container images this version deploys carry CVE-2026-44405.

Container imageDigestPackageFixed in
apache/airflow:2.8.4-python3.964e58748b6b9
paramiko@3.4.0
no fix listed

Open the chart page →

11,367
netboxbootcVerified publisher4.1.11 of 4See more

netbox bootc 4.1.1

1 of the 4 container images this version deploys carry CVE-2026-44405.

Container imageDigestPackageFixed in
netboxcommunity/netbox:v3.2.83d652dca5351
paramiko@2.11.0
no fix listed

Open the chart page →

9,145
nacosygqygq2Verified publisher2.1.101 of 4See more

nacos ygqygq2 2.1.10

1 of the 4 container images this version deploys carry CVE-2026-44405.

Container imageDigestPackageFixed in
ygqygq2/mysql-exec-sql:latest54f30def1558
paramiko@2.11.0
no fix listed

Open the chart page →

4,983
home-assistantgeek-cookbookVerified publisher13.5.01 of 1See more

home-assistant geek-cookbook 13.5.0

1 of the 1 container images this version deploys carry CVE-2026-44405.

Container imageDigestPackageFixed in
ghcr.io/home-assistant/home-assistant:2022.5.4ec6d67fbedfa
paramiko@2.10.4
no fix listed

Open the chart page →

7,705
redashredash4.2.01 of 3See more

redash redash 4.2.0

1 of the 3 container images this version deploys carry CVE-2026-44405.

Container imageDigestPackageFixed in
redash/redash:25.8.000d813437db5
paramiko@3.4.1
no fix listed

Open the chart page →

5,987
homeassistantvolker-raschekVerified publisher0.2.31 of 1See more

homeassistant volker-raschek 0.2.3

1 of the 1 container images this version deploys carry CVE-2026-44405.

Container imageDigestPackageFixed in
homeassistant/home-assistant:2023.12.48d000332b09b
paramiko@3.4.0
no fix listed

Open the chart page →

6,041
stackstorm-hastackstormVerified publisher1.1.011 of 17See more

stackstorm-ha stackstorm 1.1.0

11 of the 17 container images this version deploys carry CVE-2026-44405.

Container imageDigestPackageFixed in
stackstorm/st2actionrunner:3.888235ba70cad
paramiko@2.11.0
no fix listed
stackstorm/st2api:3.86f56d239d280
paramiko@2.11.0
no fix listed
stackstorm/st2auth:3.833ecfda16608
paramiko@2.11.0
no fix listed
stackstorm/st2garbagecollector:3.84e3f8c7ca52d
paramiko@2.11.0
no fix listed
stackstorm/st2notifier:3.8f190a6212195
paramiko@2.11.0
no fix listed
stackstorm/st2rulesengine:3.8259503496ff9
paramiko@2.11.0
no fix listed
stackstorm/st2scheduler:3.8b1de2055c362
paramiko@2.11.0
no fix listed
stackstorm/st2sensorcontainer:3.8b1a338f64773
paramiko@2.11.0
no fix listed
stackstorm/st2stream:3.81c8904a3bf67
paramiko@2.11.0
no fix listed
stackstorm/st2timersengine:3.81bf35bfaf00c
paramiko@2.11.0
no fix listed
stackstorm/st2workflowengine:3.819fdfffdbba8
paramiko@2.11.0
no fix listed

Open the chart page →

96,419
nautobotnautobotOfficialVerified publisher3.1.21 of 1See more

nautobot nautobot 3.1.2

1 of the 1 container images this version deploys carry CVE-2026-44405.

Container imageDigestPackageFixed in
networktocode/nautobot:3.0-py3.13ed484336b1ad
paramiko@4.0.0
no fix listed

Open the chart page →

4,332
home-assistantalekcVerified publisher2.11.21 of 1See more

home-assistant alekc 2.11.2

1 of the 1 container images this version deploys carry CVE-2026-44405.

Container imageDigestPackageFixed in
ghcr.io/home-assistant/home-assistant:2026.9.2a1bc133af84e
paramiko@3.5.0
no fix listed

Open the chart page →

2,133
home-assistantandrenarchyVerified publisher14.103.01 of 1See more

home-assistant andrenarchy 14.103.0

1 of the 1 container images this version deploys carry CVE-2026-44405.

Container imageDigestPackageFixed in
ghcr.io/home-assistant/home-assistant:2026.9.1612d76760b54
paramiko@3.5.0
no fix listed

Open the chart page →

2,133
wordpresshelmforgeVerified publisher3.0.61 of 3See more

wordpress helmforge 3.0.6

1 of the 3 container images this version deploys carry CVE-2026-44405.

Container imageDigestPackageFixed in
library/mysql:9.7.2257388edf9c8
paramiko@4.0.0
no fix listed

Open the chart page →

4,148
lightrun-helm-chartlightrun-helm-chartOfficialVerified publisher3.51.01 of 9See more

lightrun-helm-chart lightrun-helm-chart 3.51.0

1 of the 9 container images this version deploys carry CVE-2026-44405.

Container imageDigestPackageFixed in
library/mysql:8.4.108dbcf531a03a
paramiko@4.0.0
no fix listed

Open the chart page →

463
pgadmincetic0.1.121 of 1See more

pgadmin cetic 0.1.12

1 of the 1 container images this version deploys carry CVE-2026-44405.

Container imageDigestPackageFixed in
dpage/pgadmin4:latest2f4ce946ddf8
paramiko@3.5.1
no fix listed

Open the chart page →

398
dolibarrhelmforgeVerified publisher1.2.181 of 3See more

dolibarr helmforge 1.2.18

1 of the 3 container images this version deploys carry CVE-2026-44405.

Container imageDigestPackageFixed in
library/mysql:9.7.2257388edf9c8
paramiko@4.0.0
no fix listed

Open the chart page →

4,109
netboxstartechnicaVerified publisher5.1.01 of 4See more

netbox startechnica 5.1.0

1 of the 4 container images this version deploys carry CVE-2026-44405.

Container imageDigestPackageFixed in
netboxcommunity/netbox:v3.7.8-2.8.09bf83b350a89
paramiko@3.4.0
no fix listed

Open the chart page →

1,650
ansible-semaphoreansible-semaphore0.1.01 of 1See more

ansible-semaphore ansible-semaphore 0.1.0

1 of the 1 container images this version deploys carry CVE-2026-44405.

Container imageDigestPackageFixed in
ansiblesemaphore/semaphore:v2.8.5303d1f8684027
paramiko@2.7.2
no fix listed

Open the chart page →

4,019
openshift-secured-pgadmineximiaitVerified publisher0.2.01 of 2See more

openshift-secured-pgadmin eximiait 0.2.0

1 of the 2 container images this version deploys carry CVE-2026-44405.

Container imageDigestPackageFixed in
dpage/pgadmin4:7.537946e4f3e7b
paramiko@3.2.0
no fix listed

Open the chart page →

14,546
ghost-on-kubernetesghost-on-kubernetes-helmVerified publisher1.1.21 of 3See more

ghost-on-kubernetes ghost-on-kubernetes-helm 1.1.2

1 of the 3 container images this version deploys carry CVE-2026-44405.

Container imageDigestPackageFixed in
library/mysql:8.4b3b90af2a655
paramiko@4.0.0
no fix listed

Open the chart page →

1,447
home-assistanthome-assistantVerified publisher0.5.101 of 3See more

home-assistant home-assistant 0.5.10

1 of the 3 container images this version deploys carry CVE-2026-44405.

Container imageDigestPackageFixed in
ghcr.io/home-assistant/home-assistant:2026.9.0372d991e5888
paramiko@3.5.0
no fix listed

Open the chart page →

2,331
home-assistantk8s-home-lab-repo16.3.11 of 1See more

home-assistant k8s-home-lab-repo 16.3.1

1 of the 1 container images this version deploys carry CVE-2026-44405.

Container imageDigestPackageFixed in
ghcr.io/home-operations/home-assistant:2026.3.1067e54e2e107
paramiko@3.5.0
no fix listed

Open the chart page →

4,634
kubeviouskubevious1.2.21 of 7See more

kubevious kubevious 1.2.2

1 of the 7 container images this version deploys carry CVE-2026-44405.

Container imageDigestPackageFixed in
library/mysql:8.0.303c1aab708f6e
paramiko@2.9.2
no fix listed

Open the chart page →

14,204
skypilotskypilotOfficialVerified publisher0.13.01 of 3See more

skypilot skypilot 0.13.0

1 of the 3 container images this version deploys carry CVE-2026-44405.

Container imageDigestPackageFixed in
berkeleyskypilot/skypilot:0.13.03bc8bf8f4d83
paramiko@3.5.1
no fix listed

Open the chart page →

5,852
psonoankra-chartsVerified publisher1.2.01 of 2See more

psono ankra-charts 1.2.0

1 of the 2 container images this version deploys carry CVE-2026-44405.

Container imageDigestPackageFixed in
psono/psono-server:5.0.03b974b43ea03
paramiko@3.4.0
no fix listed

Open the chart page →

2,388
deployautoml0.1.01 of 3See more

deploy automl 0.1.0

1 of the 3 container images this version deploys carry CVE-2026-44405.

Container imageDigestPackageFixed in
amd64/mysql:5.7e20a653e0f51
paramiko@2.11.0
no fix listed

Open the chart page →

2,947
cosmotech-copilot-apicosmotech-apiVerified publisher0.1.11 of 1See more

cosmotech-copilot-api cosmotech-api 0.1.1

1 of the 1 container images this version deploys carry CVE-2026-44405.

Container imageDigestPackageFixed in
ghcr.io/cosmo-tech/cosmotech-copilot-api:latesta2be95de450c
paramiko@3.4.0
no fix listed

Open the chart page →

11,205
datadogdatadog-test2.4.231 of 2See more

datadog datadog-test 2.4.23

1 of the 2 container images this version deploys carry CVE-2026-44405.

Container imageDigestPackageFixed in
datadog/agent:7.22.08f20e56b5311
paramiko@2.6.0
no fix listed

Open the chart page →

4,568
archerydoubanVerified publisher0.4.31 of 6See more

archery douban 0.4.3

1 of the 6 container images this version deploys carry CVE-2026-44405.

Container imageDigestPackageFixed in
hhyo/archery:v1.9.11aa41843419e
paramiko@2.11.0
no fix listed

Open the chart page →

5,853
pgadmin4folio-org1.2.301 of 1See more

pgadmin4 folio-org 1.2.30

1 of the 1 container images this version deploys carry CVE-2026-44405.

Container imageDigestPackageFixed in
dpage/pgadmin4:4.22b1f00b8163cf
paramiko@2.7.1
no fix listed

Open the chart page →

2,034
home-assistantgabe565Verified publisher0.17.01 of 1See more

home-assistant gabe565 0.17.0

1 of the 1 container images this version deploys carry CVE-2026-44405.

Container imageDigestPackageFixed in
ghcr.io/home-assistant/home-assistant:latest612d76760b54
paramiko@3.5.0
no fix listed

Open the chart page →

2,133
gentrace-self-hostedgentrace-self-hostedVerified publisher0.1.31 of 9See more

gentrace-self-hosted gentrace-self-hosted 0.1.3

1 of the 9 container images this version deploys carry CVE-2026-44405.

Container imageDigestPackageFixed in
confluentinc/cp-kafka:7.4.4c0224a1adf7a
paramiko@2.12.0
no fix listed

Open the chart page →

15,562
IMgrycapOfficialVerified publisher1.8.02 of 3See more

IM grycap 1.8.0

2 of the 3 container images this version deploys carry CVE-2026-44405.

Container imageDigestPackageFixed in
library/mysql:8.4b3b90af2a655
paramiko@4.0.0
no fix listed
ghcr.io/grycap/im:latest06a16d4f279f
paramiko@4.0.0
no fix listed

Open the chart page →

4,132
matomohelmforgeVerified publisher2.3.01 of 3See more

matomo helmforge 2.3.0

1 of the 3 container images this version deploys carry CVE-2026-44405.

Container imageDigestPackageFixed in
library/mysql:9.7.2b2cf29815e62
paramiko@4.0.0
no fix listed

Open the chart page →

2,680
hertzbeatkubesphere-testVerified publisher1.4.11 of 4See more

hertzbeat kubesphere-test 1.4.1

1 of the 4 container images this version deploys carry CVE-2026-44405.

Container imageDigestPackageFixed in
library/mysql:8b3b90af2a655
paramiko@4.0.0
no fix listed

Open the chart page →

7,710
Practica_4_Recuperacion_helmmca-03-02-practica4-recuperacionVerified publisher1.0.11 of 6See more

Practica_4_Recuperacion_helm mca-03-02-practica4-recuperacion 1.0.1

1 of the 6 container images this version deploys carry CVE-2026-44405.

Container imageDigestPackageFixed in
library/mysql:8b3b90af2a655
paramiko@4.0.0
no fix listed

Open the chart page →

19,187
opikopikOfficialVerified publisher2.2.591 of 13See more

opik opik 2.2.59

1 of the 13 container images this version deploys carry CVE-2026-44405.

Container imageDigestPackageFixed in
library/mysql:8.4.2ac80b6e09e5b
paramiko@3.4.0
no fix listed

Open the chart page →

14,334
phonebook-chartphonebook-chart0.1.01 of 3See more

phonebook-chart phonebook-chart 0.1.0

1 of the 3 container images this version deploys carry CVE-2026-44405.

Container imageDigestPackageFixed in
library/mysql:5.74bc6bc963e6d
paramiko@2.11.0
no fix listed

Open the chart page →

3,034
phpipamphpipam-helmVerified publisher1.0.121 of 3See more

phpipam phpipam-helm 1.0.12

1 of the 3 container images this version deploys carry CVE-2026-44405.

Container imageDigestPackageFixed in
library/mysql:8.0.40d58ac93387f6
paramiko@3.4.0
no fix listed

Open the chart page →

3,778
home-assistantpree-helm-chartsVerified publisher1.80.01 of 1See more

home-assistant pree-helm-charts 1.80.0

1 of the 1 container images this version deploys carry CVE-2026-44405.

Container imageDigestPackageFixed in
ghcr.io/home-assistant/home-assistant:2026.9.2a1bc133af84e
paramiko@3.5.0
no fix listed

Open the chart page →

2,133
prometheus-pve-exporterstenicVerified publisher0.1.11 of 1See more

prometheus-pve-exporter stenic 0.1.1

1 of the 1 container images this version deploys carry CVE-2026-44405.

Container imageDigestPackageFixed in
prompve/prometheus-pve-exporter:2.0.1ff6749eb03b0
paramiko@2.7.1
no fix listed

Open the chart page →

2,469
phonebook-chartusuladamsVerified publisher0.1.51 of 3See more

phonebook-chart usuladams 0.1.5

1 of the 3 container images this version deploys carry CVE-2026-44405.

Container imageDigestPackageFixed in
library/mysql:5.74bc6bc963e6d
paramiko@2.11.0
no fix listed

Open the chart page →

3,176
wordpress-e2e-setupwoocommerce-e2e-setup0.1.11 of 2See more

wordpress-e2e-setup woocommerce-e2e-setup 0.1.1

1 of the 2 container images this version deploys carry CVE-2026-44405.

Container imageDigestPackageFixed in
library/mysql:8.07dcddc01f13b
paramiko@4.0.0
no fix listed

Open the chart page →

7,696
wordpress-helmwordpress-helm0.2.91 of 4See more

wordpress-helm wordpress-helm 0.2.9

1 of the 4 container images this version deploys carry CVE-2026-44405.

Container imageDigestPackageFixed in
library/mysql:885b9bf2e29cf
paramiko@4.0.0
no fix listed

Open the chart page →

8,217
aktoakto0.2.02 of 7See more

akto akto 0.2.0

2 of the 7 container images this version deploys carry CVE-2026-44405.

Container imageDigestPackageFixed in
confluentinc/cp-kafka:6.2.11-1-ubi8ac776fad95a5
paramiko@2.12.0
no fix listed
confluentinc/cp-zookeeper:6.2.11-1-ubi8cae577096489
paramiko@2.12.0
no fix listed

Open the chart page →

13,613
akto-protectionakto0.1.02 of 4See more

akto-protection akto 0.1.0

2 of the 4 container images this version deploys carry CVE-2026-44405.

Container imageDigestPackageFixed in
confluentinc/cp-kafka:6.2.11-1-ubi8ac776fad95a5
paramiko@2.12.0
no fix listed
confluentinc/cp-zookeeper:6.2.11-1-ubi8cae577096489
paramiko@2.12.0
no fix listed

Open the chart page →

11,285
pagesalstom-pages-app1.0.01 of 3See more

pages alstom-pages-app 1.0.0

1 of the 3 container images this version deploys carry CVE-2026-44405.

Container imageDigestPackageFixed in
library/mysql:8.07dcddc01f13b
paramiko@4.0.0
no fix listed

Open the chart page →

20,190
pagesandrei-pages1.0.01 of 3See more

pages andrei-pages 1.0.0

1 of the 3 container images this version deploys carry CVE-2026-44405.

Container imageDigestPackageFixed in
library/mysql:8.07dcddc01f13b
paramiko@4.0.0
no fix listed

Open the chart page →

20,190
pgadminappscodeVerified publisher2026.3.301 of 1See more

pgadmin appscode 2026.3.30

1 of the 1 container images this version deploys carry CVE-2026-44405.

Container imageDigestPackageFixed in
dpage/pgadmin4:9.11.050700ac17936
paramiko@3.5.1
no fix listed

Open the chart page →

1,565
pgadminarunalakmalVerified publisher0.1.01 of 1See more

pgadmin arunalakmal 0.1.0

1 of the 1 container images this version deploys carry CVE-2026-44405.

Container imageDigestPackageFixed in
dpage/pgadmin4:6.12781369df9994
paramiko@2.11.0
no fix listed

Open the chart page →

2,418
swdpgadminarunalakmalVerified publisher0.1.01 of 1See more

swdpgadmin arunalakmal 0.1.0

1 of the 1 container images this version deploys carry CVE-2026-44405.

Container imageDigestPackageFixed in
dpage/pgadmin4:6.12781369df9994
paramiko@2.11.0
no fix listed

Open the chart page →

2,418

Container images carrying it

134 by charts deploying them

A fixed version is listed for 0 of the 2 affected packages.

Container imageDigestPackageFixed inUsed by
stackstorm/st2garbagecollector:3.84e3f8c7ca52d
paramiko@2.11.0
no fix listed
1
stackstorm/st2notifier:3.8f190a6212195
paramiko@2.11.0
no fix listed
1
stackstorm/st2rulesengine:3.8259503496ff9
paramiko@2.11.0
no fix listed
1
stackstorm/st2scheduler:3.8b1de2055c362
paramiko@2.11.0
no fix listed
1
stackstorm/st2sensorcontainer:3.8b1a338f64773
paramiko@2.11.0
no fix listed
1
stackstorm/st2stream:3.81c8904a3bf67
paramiko@2.11.0
no fix listed
1
stackstorm/st2timersengine:3.81bf35bfaf00c
paramiko@2.11.0
no fix listed
1
stackstorm/st2workflowengine:3.819fdfffdbba8
paramiko@2.11.0
no fix listed
1
svtechnmaa/svtech_icinga2:v1.1.667be2aba9436
paramiko@3.4.0
no fix listed
1
svtechnmaa/svtech_rundeck:v1.2.26e368ace0977
paramiko@2.11.0
no fix listed
1
voltha/voltha-cli:1.6.0c4e41e92f046
paramiko@2.4.2
no fix listed
1
voltha/voltha-netconf:1.6.037f80524c207
paramiko@2.4.2
no fix listed
1
voltha/voltha-ofagent:1.6.09ee8c1f4428c
paramiko@2.4.2
no fix listed
1
voltha/voltha-tester:1.7.0655c3048a602
paramiko@2.6.0
no fix listed
1
voltha/voltha-voltha:1.6.0ff596b62de59
paramiko@2.4.2
no fix listed
1
wallabag/wallabag:2.4.25e4c26a7fb4a
paramiko@2.7.1
no fix listed
1
ygqygq2/mysql-exec-sql:latest54f30def1558
paramiko@2.11.0
no fix listed
1
ghcr.io/cosmo-tech/cosmotech-copilot-api:latesta2be95de450c
paramiko@3.4.0
no fix listed
1
ghcr.io/dodevops/azure-advanced-backup:0.4.01041d4449e49
paramiko@2.10.1
no fix listed
1
ghcr.io/ducksify/pgdump-to-s3:latestc42c0946bd0f
paramiko@2.11.0
no fix listed
1
ghcr.io/goauthentik/server:2026.2.146a71d75dfd3
paramiko@4.0.0
no fix listed
1
ghcr.io/goauthentik/server:2026.5.6ed120caf710c
paramiko@4.0.0
no fix listed
1
ghcr.io/grycap/im:latest06a16d4f279f
paramiko@4.0.0
no fix listed
1
ghcr.io/home-assistant/home-assistant:2025.3.026c51e44d932
paramiko@3.5.0
no fix listed
1
ghcr.io/home-assistant/home-assistant:2026.9.0372d991e5888
paramiko@3.5.0
no fix listed
1
ghcr.io/home-assistant/home-assistant:2026.8.256690a89c79a
paramiko@3.5.0
no fix listed
1
ghcr.io/home-assistant/home-assistant:2025.12.59a5a3eb4a213
paramiko@3.5.0
no fix listed
1
ghcr.io/home-assistant/home-assistant:2022.5.4ec6d67fbedfa
paramiko@2.10.4
no fix listed
1
ghcr.io/home-assistant/home-assistant:2023.11.3feffc0b8227d
paramiko@3.3.1
no fix listed
1
ghcr.io/home-operations/home-assistant:2026.3.1067e54e2e107
paramiko@3.5.0
no fix listed
1
ghcr.io/m0nsterrr/hyperglass:v2.0.4f7b5d20c5e42
paramiko@3.4.0
no fix listed
1
public.ecr.aws/datadog/agent:7.73.0f4925b15ce94
paramiko@3.5.1
no fix listed
1
quay.io/cloudnativetoolkit/cli-tools:v1.1-v1.8.2d6fd2a9e3273
paramiko@2.11.0
no fix listed
1
quay.io/ibmgaragecloud/cli-tools:v0.159663f06adcb1
paramiko@2.10.3
no fix listed
1

syft 1.42.1 · advisories as of 14 Sept 2026

Corrections: contact@stackradar.io

Catalogue: Artifact Hub · Advisories: OSV · Exploitation: FIRST EPSS, CISA KEV.