StackRadarChart IndexLive demo

CVE-2026-44405

Low

Advisory

Published 6 May 2026In the index since 5 Sept 2026

Severity: Low; worst across findings
CVSS: 3.4; base score, highest
EPSS: 0.001; 2nd percentile
CISA KEV: Not listed; no confirmed exploitation
Charts affected: 256; of 17,781 indexed, latest versions
Container images: 134; deployed by those charts
Fix available: None; affected packages

Paramiko rsakey.py allows the SHA-1 algorithm

Carried by container images the latest versions of 256 of 17,781 indexed charts deploy, on 134 images.

Affected package	Affected versions	Fixed in	Images
paramikopypi	1.10.1, 2.1.2, 2.4.2, 2.6.0+17 more	no fix listed	134
paramikodeb	1.10.1-1git1ubuntu0.1	no fix listed	2

OSV records: GHSA-r374-rxx8-8654 UBUNTU-CVE-2026-44405
Also known as: PYSEC-2026-2858

Charts affected

256 by stars

Chart

Latest

Affected images

Radar Score

pagespages-ssharma0909

1 of 3 See more

pages pages-ssharma0909 1.0.0

1 of the 3 container images this version deploys carry CVE-2026-44405.

Container image	Digest	Package	Fixed in
library/mysql :8.0	7dcddc01f13b	paramiko@4.0.0	no fix listed

Open the chart page →

20,190

pagespages-sucharitha

1 of 3 See more

pages pages-sucharitha 1.0.0

1 of the 3 container images this version deploys carry CVE-2026-44405.

Container image	Digest	Package	Fixed in
library/mysql :8.0	7dcddc01f13b	paramiko@4.0.0	no fix listed

Open the chart page →

20,190

pagespages-sudhir

1 of 3 See more

pages pages-sudhir 1.0.0

1 of the 3 container images this version deploys carry CVE-2026-44405.

Container image	Digest	Package	Fixed in
library/mysql :8.0	7dcddc01f13b	paramiko@4.0.0	no fix listed

Open the chart page →

20,190

pagespages-sushi

1 of 3 See more

pages pages-sushi 1.0.0

1 of the 3 container images this version deploys carry CVE-2026-44405.

Container image	Digest	Package	Fixed in
library/mysql :8.0	7dcddc01f13b	paramiko@4.0.0	no fix listed

Open the chart page →

20,190

pagespages-vasanth5814

1 of 3 See more

pages pages-vasanth5814 1.0.0

1 of the 3 container images this version deploys carry CVE-2026-44405.

Container image	Digest	Package	Fixed in
library/mysql :8.0	7dcddc01f13b	paramiko@4.0.0	no fix listed

Open the chart page →

20,190

pagespages-vjp

1 of 3 See more

pages pages-vjp 1.0.0

1 of the 3 container images this version deploys carry CVE-2026-44405.

Container image	Digest	Package	Fixed in
library/mysql :8.0	7dcddc01f13b	paramiko@4.0.0	no fix listed

Open the chart page →

20,190

home-assistantpascaliske

1 of 1 See more

home-assistant pascaliske 0.1.1

1 of the 1 container images this version deploys carry CVE-2026-44405.

Container image	Digest	Package	Fixed in
ghcr.io/home-assistant/home-assistant :2025.12.5	9a5a3eb4a213	paramiko@3.5.0	no fix listed

Open the chart page →

4,749

pagespawan-pages

1 of 3 See more

pages pawan-pages 1.0.0

1 of the 3 container images this version deploys carry CVE-2026-44405.

Container image	Digest	Package	Fixed in
library/mysql :8.0	7dcddc01f13b	paramiko@4.0.0	no fix listed

Open the chart page →

20,190

pagespighosh-pages

1 of 3 See more

pages pighosh-pages 1.0.0

1 of the 3 container images this version deploys carry CVE-2026-44405.

Container image	Digest	Package	Fixed in
library/mysql :8.0	7dcddc01f13b	paramiko@4.0.0	no fix listed

Open the chart page →

20,190

practica-helmpractica-helm

1 of 7 See more

practica-helm practica-helm 0.1.0

1 of the 7 container images this version deploys carry CVE-2026-44405.

Container image	Digest	Package	Fixed in
library/mysql :5.7	4bc6bc963e6d	paramiko@2.11.0	no fix listed

Open the chart page →

28,484

pagesprasanthi

1 of 3 See more

pages prasanthi 1.0.0

1 of the 3 container images this version deploys carry CVE-2026-44405.

Container image	Digest	Package	Fixed in
library/mysql :8.0	7dcddc01f13b	paramiko@4.0.0	no fix listed

Open the chart page →

20,190

wp-chartprojet-devops

1 of 2 See more

wp-chart projet-devops 0.1.0

1 of the 2 container images this version deploys carry CVE-2026-44405.

Container image	Digest	Package	Fixed in
library/mysql :5.7	4bc6bc963e6d	paramiko@2.11.0	no fix listed

Open the chart page →

5,203

flaskDiaryptj-miniproject

1 of 2 See more

flaskDiary ptj-miniproject 2.1.2

1 of the 2 container images this version deploys carry CVE-2026-44405.

Container image	Digest	Package	Fixed in
library/mysql :8.0	7dcddc01f13b	paramiko@4.0.0	no fix listed

Open the chart page →

3,071

cdmswebapppyalive-cdmswebapp

1 of 3 See more

cdmswebapp pyalive-cdmswebapp 0.1.0

1 of the 3 container images this version deploys carry CVE-2026-44405.

Container image	Digest	Package	Fixed in
library/mysql :5.7	4bc6bc963e6d	paramiko@2.11.0	no fix listed

Open the chart page →

6,668

rada-platformrada-platform

1 of 7 See more

rada-platform rada-platform 0.1.0

1 of the 7 container images this version deploys carry CVE-2026-44405.

Container image	Digest	Package	Fixed in
apache/airflow :2.10.2-python3.9	ce90bdc3d2af	paramiko@3.5.0	no fix listed

Open the chart page →

21,211

radar-cp-ksql-serverradar-base

1 of 2 See more

radar-cp-ksql-server radar-base 0.0.2

1 of the 2 container images this version deploys carry CVE-2026-44405.

Container image	Digest	Package	Fixed in
confluentinc/cp-ksqldb-server :7.6.0	8ec46c27982f	paramiko@3.4.0	no fix listed

Open the chart page →

5,269

pagesranjinigogga

1 of 3 See more

pages ranjinigogga 1.0.0

1 of the 3 container images this version deploys carry CVE-2026-44405.

Container image	Digest	Package	Fixed in
library/mysql :8.0	7dcddc01f13b	paramiko@4.0.0	no fix listed

Open the chart page →

20,190

pagesrebecca-pages

1 of 3 See more

pages rebecca-pages 1.0.0

1 of the 3 container images this version deploys carry CVE-2026-44405.

Container image	Digest	Package	Fixed in
library/mysql :8.0	7dcddc01f13b	paramiko@4.0.0	no fix listed

Open the chart page →

20,190

pagesroccohiggins-pages

1 of 3 See more

pages roccohiggins-pages 1.0.0

1 of the 3 container images this version deploys carry CVE-2026-44405.

Container image	Digest	Package	Fixed in
library/mysql :8.0	7dcddc01f13b	paramiko@4.0.0	no fix listed

Open the chart page →

20,190

reviewboardrock8s

1 of 3 See more

reviewboard rock8s 0.0.1

1 of the 3 container images this version deploys carry CVE-2026-44405.

Container image	Digest	Package	Fixed in
beanbag/reviewboard :latest	6b840f546e1c	paramiko@3.4.1	no fix listed

Open the chart page →

6,084

pagesronan-pages

1 of 3 See more

pages ronan-pages 1.0.0

1 of the 3 container images this version deploys carry CVE-2026-44405.

Container image	Digest	Package	Fixed in
library/mysql :8.0	7dcddc01f13b	paramiko@4.0.0	no fix listed

Open the chart page →

20,190

checkmkrtomik-helm-charts

1 of 1 See more

checkmk rtomik-helm-charts 0.1.0

1 of the 1 container images this version deploys carry CVE-2026-44405.

Container image	Digest	Package	Fixed in
checkmk/check-mk-community :2.5.0p6	c11b422210c4	paramiko@4.0.0	no fix listed

Open the chart page →

7,436

pagessamanvithkaranth

1 of 3 See more

pages samanvithkaranth 1.0.0

1 of the 3 container images this version deploys carry CVE-2026-44405.

Container image	Digest	Package	Fixed in
library/mysql :8.0	7dcddc01f13b	paramiko@4.0.0	no fix listed

Open the chart page →

20,190

pagessarubits-pages

1 of 3 See more

pages sarubits-pages 1.0.0

1 of the 3 container images this version deploys carry CVE-2026-44405.

Container image	Digest	Package	Fixed in
library/mysql :8.0	7dcddc01f13b	paramiko@4.0.0	no fix listed

Open the chart page →

20,190

airflowsb-helm-charts

1 of 1 See more

airflow sb-helm-charts 0.3.0

1 of the 1 container images this version deploys carry CVE-2026-44405.

Container image	Digest	Package	Fixed in
apache/airflow :2.8.1	e5560ad0b86e	paramiko@3.4.0	no fix listed

Open the chart page →

10,209

mysqlsb-helm-charts

1 of 1 See more

mysql sb-helm-charts 0.4.0

1 of the 1 container images this version deploys carry CVE-2026-44405.

Container image	Digest	Package	Fixed in
library/mysql :8.4.3	106d5197fd8e	paramiko@3.4.0	no fix listed

Open the chart page →

1,096

pgadminsb-helm-charts

1 of 1 See more

pgadmin sb-helm-charts 0.3.0

1 of the 1 container images this version deploys carry CVE-2026-44405.

Container image	Digest	Package	Fixed in
dpage/pgadmin4 :8.13	561c1f8f99f2	paramiko@3.5.0	no fix listed

Open the chart page →

1,713

secret-managersecret-manager

1 of 4 See more

secret-manager secret-manager 1.0.0

1 of the 4 container images this version deploys carry CVE-2026-44405.

Container image	Digest	Package	Fixed in
library/mysql :9.0.1	92dc86967801	paramiko@3.4.0	no fix listed

Open the chart page →

5,497

pagessekharpkube

1 of 3 See more

pages sekharpkube 1.0.0

1 of the 3 container images this version deploys carry CVE-2026-44405.

Container image	Digest	Package	Fixed in
library/mysql :8.0	7dcddc01f13b	paramiko@4.0.0	no fix listed

Open the chart page →

20,190

ansible-semaphoresergiotocalini

1 of 1 See more

ansible-semaphore sergiotocalini 1.2.0

1 of the 1 container images this version deploys carry CVE-2026-44405.

Container image	Digest	Package	Fixed in
semaphoreui/semaphore :v2.9.64	5b50bc11833f	paramiko@3.1.0	no fix listed

Open the chart page →

3,337

pagesshrutiujlan-pages

1 of 3 See more

pages shrutiujlan-pages 1.0.0

1 of the 3 container images this version deploys carry CVE-2026-44405.

Container image	Digest	Package	Fixed in
library/mysql :8.0	7dcddc01f13b	paramiko@4.0.0	no fix listed

Open the chart page →

20,190

pgadminsikalabs

1 of 2 See more

pgadmin sikalabs 0.1.0

1 of the 2 container images this version deploys carry CVE-2026-44405.

Container image	Digest	Package	Fixed in
dpage/pgadmin4 :latest	2f4ce946ddf8	paramiko@3.5.1	no fix listed

Open the chart page →

398

sneakerssneakers

1 of 4 See more

sneakers sneakers 1.0.0

1 of the 4 container images this version deploys carry CVE-2026-44405.

Container image	Digest	Package	Fixed in
helga09/my_sql_shoes :v1.1.1	a03657d97897	paramiko@2.11.0	no fix listed

Open the chart page →

7,574

spacecapybara-chartspacecapy

1 of 2 See more

spacecapybara-chart spacecapy 1.0.49

1 of the 2 container images this version deploys carry CVE-2026-44405.

Container image	Digest	Package	Fixed in
library/mysql :8.0	7dcddc01f13b	paramiko@4.0.0	no fix listed

Open the chart page →

11,888

pagessrinipages

1 of 3 See more

pages srinipages 1.0.0

1 of the 3 container images this version deploys carry CVE-2026-44405.

Container image	Digest	Package	Fixed in
library/mysql :8.0	7dcddc01f13b	paramiko@4.0.0	no fix listed

Open the chart page →

20,190

pgadminstakater

1 of 1 See more

pgadmin stakater 0.1.14

1 of the 1 container images this version deploys carry CVE-2026-44405.

Container image	Digest	Package	Fixed in
dpage/pgadmin4 :4.5	a5a656e1d5fd	paramiko@2.4.2	no fix listed

Open the chart page →

2,060

pagesstephendillondell

1 of 3 See more

pages stephendillondell 1.0.0

1 of the 3 container images this version deploys carry CVE-2026-44405.

Container image	Digest	Package	Fixed in
library/mysql :8.0	7dcddc01f13b	paramiko@4.0.0	no fix listed

Open the chart page →

20,190

pagessunilb2590-pages

1 of 3 See more

pages sunilb2590-pages 1.0.0

1 of the 3 container images this version deploys carry CVE-2026-44405.

Container image	Digest	Package	Fixed in
library/mysql :8.0	7dcddc01f13b	paramiko@4.0.0	no fix listed

Open the chart page →

20,190

freeradiussvtech-public-helm-charts

1 of 4 See more

freeradius svtech-public-helm-charts 0.1.5

1 of the 4 container images this version deploys carry CVE-2026-44405.

Container image	Digest	Package	Fixed in
library/mysql :8.2.0	212fe73edca5	paramiko@2.11.0	no fix listed

Open the chart page →

12,655

icinga2svtech-public-helm-charts

1 of 4 See more

icinga2 svtech-public-helm-charts 1.0.0

1 of the 4 container images this version deploys carry CVE-2026-44405.

Container image	Digest	Package	Fixed in
svtechnmaa/svtech_icinga2 :v1.1.6	67be2aba9436	paramiko@3.4.0	no fix listed

Open the chart page →

5,511

maxscalesvtech-public-helm-charts

1 of 2 See more

maxscale svtech-public-helm-charts 1.0.0

1 of the 2 container images this version deploys carry CVE-2026-44405.

Container image	Digest	Package	Fixed in
library/mysql :8.2.0	212fe73edca5	paramiko@2.11.0	no fix listed

Open the chart page →

5,841

rundecksvtech-public-helm-charts

1 of 2 See more

rundeck svtech-public-helm-charts 1.0.0

1 of the 2 container images this version deploys carry CVE-2026-44405.

Container image	Digest	Package	Fixed in
svtechnmaa/svtech_rundeck :v1.2.2	6e368ace0977	paramiko@2.11.0	no fix listed

Open the chart page →

18,756

agentssynapse

1 of 9 See more

agents synapse 0.1.30

1 of the 9 container images this version deploys carry CVE-2026-44405.

Container image	Digest	Package	Fixed in
mysql/mysql-server :latest	d6c8301b7834	paramiko@2.11.0	no fix listed

Open the chart page →

7,244

scribesynapse

1 of 7 See more

scribe synapse 0.2.16

1 of the 7 container images this version deploys carry CVE-2026-44405.

Container image	Digest	Package	Fixed in
mysql/mysql-server :latest	d6c8301b7834	paramiko@2.11.0	no fix listed

Open the chart page →

2,680

sinnersynapse

1 of 6 See more

sinner synapse 0.1.0

1 of the 6 container images this version deploys carry CVE-2026-44405.

Container image	Digest	Package	Fixed in
mysql/mysql-server :latest	d6c8301b7834	paramiko@2.11.0	no fix listed

Open the chart page →

1,955

tensor_apptensor-app

1 of 3 See more

tensor_app tensor-app 0.2.2

1 of the 3 container images this version deploys carry CVE-2026-44405.

Container image	Digest	Package	Fixed in
library/mysql :5.7	4bc6bc963e6d	paramiko@2.11.0	no fix listed

Open the chart page →

17,461

pagestest4322

1 of 3 See more

pages test4322 1.0.0

1 of the 3 container images this version deploys carry CVE-2026-44405.

Container image	Digest	Package	Fixed in
library/mysql :8.0	7dcddc01f13b	paramiko@4.0.0	no fix listed

Open the chart page →

20,190

flask-contactstest-configmap

1 of 3 See more

flask-contacts test-configmap 1.0.1

1 of the 3 container images this version deploys carry CVE-2026-44405.

Container image	Digest	Package	Fixed in
library/mysql :8.0	7dcddc01f13b	paramiko@4.0.0	no fix listed

Open the chart page →

5,704

pagesthiru-pages

1 of 3 See more

pages thiru-pages 1.0.0

1 of the 3 container images this version deploys carry CVE-2026-44405.

Container image	Digest	Package	Fixed in
library/mysql :8.0	7dcddc01f13b	paramiko@4.0.0	no fix listed

Open the chart page →

20,190

pagesthuy-pages

1 of 3 See more

pages thuy-pages 1.0.0

1 of the 3 container images this version deploys carry CVE-2026-44405.

Container image	Digest	Package	Fixed in
library/mysql :8.0	7dcddc01f13b	paramiko@4.0.0	no fix listed

Open the chart page →

20,190

Container images carrying it

134 by charts deploying them

A fixed version is listed for 0 of the 2 affected packages.

Container image	Digest	Package	Fixed in	Used by
stackstorm/st2garbagecollector :3.8	4e3f8c7ca52d	paramiko@2.11.0	no fix listed	1
stackstorm/st2notifier :3.8	f190a6212195	paramiko@2.11.0	no fix listed	1
stackstorm/st2rulesengine :3.8	259503496ff9	paramiko@2.11.0	no fix listed	1
stackstorm/st2scheduler :3.8	b1de2055c362	paramiko@2.11.0	no fix listed	1
stackstorm/st2sensorcontainer :3.8	b1a338f64773	paramiko@2.11.0	no fix listed	1
stackstorm/st2stream :3.8	1c8904a3bf67	paramiko@2.11.0	no fix listed	1
stackstorm/st2timersengine :3.8	1bf35bfaf00c	paramiko@2.11.0	no fix listed	1
stackstorm/st2workflowengine :3.8	19fdfffdbba8	paramiko@2.11.0	no fix listed	1
svtechnmaa/svtech_icinga2 :v1.1.6	67be2aba9436	paramiko@3.4.0	no fix listed	1
svtechnmaa/svtech_rundeck :v1.2.2	6e368ace0977	paramiko@2.11.0	no fix listed	1
voltha/voltha-cli :1.6.0	c4e41e92f046	paramiko@2.4.2	no fix listed	1
voltha/voltha-netconf :1.6.0	37f80524c207	paramiko@2.4.2	no fix listed	1
voltha/voltha-ofagent :1.6.0	9ee8c1f4428c	paramiko@2.4.2	no fix listed	1
voltha/voltha-tester :1.7.0	655c3048a602	paramiko@2.6.0	no fix listed	1
voltha/voltha-voltha :1.6.0	ff596b62de59	paramiko@2.4.2	no fix listed	1
wallabag/wallabag :2.4.2	5e4c26a7fb4a	paramiko@2.7.1	no fix listed	1
ygqygq2/mysql-exec-sql :latest	54f30def1558	paramiko@2.11.0	no fix listed	1
ghcr.io/cosmo-tech/cosmotech-copilot-api :latest	a2be95de450c	paramiko@3.4.0	no fix listed	1
ghcr.io/dodevops/azure-advanced-backup :0.4.0	1041d4449e49	paramiko@2.10.1	no fix listed	1
ghcr.io/ducksify/pgdump-to-s3 :latest	c42c0946bd0f	paramiko@2.11.0	no fix listed	1
ghcr.io/goauthentik/server :2026.2.1	46a71d75dfd3	paramiko@4.0.0	no fix listed	1
ghcr.io/goauthentik/server :2026.5.6	ed120caf710c	paramiko@4.0.0	no fix listed	1
ghcr.io/grycap/im :latest	06a16d4f279f	paramiko@4.0.0	no fix listed	1
ghcr.io/home-assistant/home-assistant :2025.3.0	26c51e44d932	paramiko@3.5.0	no fix listed	1
ghcr.io/home-assistant/home-assistant :2026.9.0	372d991e5888	paramiko@3.5.0	no fix listed	1
ghcr.io/home-assistant/home-assistant :2026.8.2	56690a89c79a	paramiko@3.5.0	no fix listed	1
ghcr.io/home-assistant/home-assistant :2025.12.5	9a5a3eb4a213	paramiko@3.5.0	no fix listed	1
ghcr.io/home-assistant/home-assistant :2022.5.4	ec6d67fbedfa	paramiko@2.10.4	no fix listed	1
ghcr.io/home-assistant/home-assistant :2023.11.3	feffc0b8227d	paramiko@3.3.1	no fix listed	1
ghcr.io/home-operations/home-assistant :2026.3.1	067e54e2e107	paramiko@3.5.0	no fix listed	1
ghcr.io/m0nsterrr/hyperglass :v2.0.4	f7b5d20c5e42	paramiko@3.4.0	no fix listed	1
public.ecr.aws/datadog/agent :7.73.0	f4925b15ce94	paramiko@3.5.1	no fix listed	1
quay.io/cloudnativetoolkit/cli-tools :v1.1-v1.8.2	d6fd2a9e3273	paramiko@2.11.0	no fix listed	1
quay.io/ibmgaragecloud/cli-tools :v0.15	9663f06adcb1	paramiko@2.10.3	no fix listed	1