StackRadar

CVE-2026-44405

Low

Advisory

Published 6 May 2026In the index since 5 Sept 2026
Severity
Low
worst across findings
CVSS
3.4
base score, highest
EPSS
0.001
2nd percentile
CISA KEV
Not listed
no confirmed exploitation
Charts affected
256
of 17,781 indexed, latest versions
Container images
134
deployed by those charts
Fix available
None
affected packages

Paramiko rsakey.py allows the SHA-1 algorithm

Carried by container images the latest versions of 256 of 17,781 indexed charts deploy, on 134 images.

Affected packageAffected versionsFixed inImages
paramikopypi1.10.1, 2.1.2, 2.4.2, 2.6.0+17 moreno fix listed134
paramikodeb1.10.1-1git1ubuntu0.1no fix listed2
OSV records
GHSA-r374-rxx8-8654UBUNTU-CVE-2026-44405
Also known as
PYSEC-2026-2858

Charts affected

256 by stars
ChartLatestAffected imagesRadar Score
assemblylineassemblylineVerified publisher7.4.173 of 12See more

assemblyline assemblyline 7.4.17

3 of the 12 container images this version deploys carry CVE-2026-44405.

Container imageDigestPackageFixed in
cccs/assemblyline-core:4.7.4.stable177c3c25d4d6e0
paramiko@3.5.1
no fix listed
cccs/assemblyline-socketio:4.7.4.stable1724646dbfd944
paramiko@3.5.1
no fix listed
cccs/assemblyline-ui:4.7.4.stable171a7a103668f5
paramiko@3.5.1
no fix listed

Open the chart page →

12,898
authorizationassist-iot-authorisation0.1.01 of 2See more

authorization assist-iot-authorisation 0.1.0

1 of the 2 container images this version deploys carry CVE-2026-44405.

Container imageDigestPackageFixed in
assistiot/authorization_db:latestc3adbab6a3e7
paramiko@2.11.0
no fix listed

Open the chart page →

5,537
automatedconfigurationassist-iot-automated-configuration1.0.02 of 5See more

automatedconfiguration assist-iot-automated-configuration 1.0.0

2 of the 5 container images this version deploys carry CVE-2026-44405.

Container imageDigestPackageFixed in
confluentinc/cp-kafka:7.5.1dc9b972db002
paramiko@2.12.0
no fix listed
confluentinc/cp-zookeeper:7.5.10bec03c1f3ce
paramiko@2.12.0
no fix listed

Open the chart page →

14,728
locationprocessingassist-iot-location-processing1.0.01 of 3See more

locationprocessing assist-iot-location-processing 1.0.0

1 of the 3 container images this version deploys carry CVE-2026-44405.

Container imageDigestPackageFixed in
dpage/pgadmin4:6.12781369df9994
paramiko@2.11.0
no fix listed

Open the chart page →

10,061
resource-provisioningassist-iot-resource-provisioning1.0.01 of 7See more

resource-provisioning assist-iot-resource-provisioning 1.0.0

1 of the 7 container images this version deploys carry CVE-2026-44405.

Container imageDigestPackageFixed in
library/mysql:5.74bc6bc963e6d
paramiko@2.11.0
no fix listed

Open the chart page →

8,032
smartorchestratorassist-iot-smart-orchestrator4.0.01 of 14See more

smartorchestrator assist-iot-smart-orchestrator 4.0.0

1 of the 14 container images this version deploys carry CVE-2026-44405.

Container imageDigestPackageFixed in
library/mysql:5.74bc6bc963e6d
paramiko@2.11.0
no fix listed

Open the chart page →

45,363
phonebook-chartasumankamberoglu0.1.51 of 3See more

phonebook-chart asumankamberoglu 0.1.5

1 of the 3 container images this version deploys carry CVE-2026-44405.

Container imageDigestPackageFixed in
library/mysql:5.74bc6bc963e6d
paramiko@2.11.0
no fix listed

Open the chart page →

3,176
azure-advanced-backupazure-advanced-backup0.4.11 of 1See more

azure-advanced-backup azure-advanced-backup 0.4.1

1 of the 1 container images this version deploys carry CVE-2026-44405.

Container imageDigestPackageFixed in
ghcr.io/dodevops/azure-advanced-backup:0.4.01041d4449e49
paramiko@2.10.1
no fix listed

Open the chart page →

4,568
ragflowbaboulinet0.1.11 of 5See more

ragflow baboulinet 0.1.1

1 of the 5 container images this version deploys carry CVE-2026-44405.

Container imageDigestPackageFixed in
library/mysql:8.0.39ccb8f749bb5e
paramiko@3.4.0
no fix listed

Open the chart page →

5,823
helm-samplebehnambm-helm-chart1.0.11 of 3See more

helm-sample behnambm-helm-chart 1.0.1

1 of the 3 container images this version deploys carry CVE-2026-44405.

Container imageDigestPackageFixed in
library/mysql:8b3b90af2a655
paramiko@4.0.0
no fix listed

Open the chart page →

2,727
pagesberrutig-pages1.0.01 of 3See more

pages berrutig-pages 1.0.0

1 of the 3 container images this version deploys carry CVE-2026-44405.

Container imageDigestPackageFixed in
library/mysql:8.07dcddc01f13b
paramiko@4.0.0
no fix listed

Open the chart page →

20,190
pagesbrian-pages1.0.01 of 3See more

pages brian-pages 1.0.0

1 of the 3 container images this version deploys carry CVE-2026-44405.

Container imageDigestPackageFixed in
library/mysql:8.07dcddc01f13b
paramiko@4.0.0
no fix listed

Open the chart page →

20,190
pagesbrixton-mayuribhavsar23-pages1.0.01 of 3See more

pages brixton-mayuribhavsar23-pages 1.0.0

1 of the 3 container images this version deploys carry CVE-2026-44405.

Container imageDigestPackageFixed in
library/mysql:8.07dcddc01f13b
paramiko@4.0.0
no fix listed

Open the chart page →

20,190
pagesbrixton-pages1.0.01 of 3See more

pages brixton-pages 1.0.0

1 of the 3 container images this version deploys carry CVE-2026-44405.

Container imageDigestPackageFixed in
library/mysql:8.07dcddc01f13b
paramiko@4.0.0
no fix listed

Open the chart page →

20,190
couchpotatobryanalves0.3.01 of 1See more

couchpotato bryanalves 0.3.0

1 of the 1 container images this version deploys carry CVE-2026-44405.

Container imageDigestPackageFixed in
linuxserver/couchpotato:75e576ee-ls32c4d2766b9eb7
paramiko@2.7.1
no fix listed

Open the chart page →

2,018
sickchillbryanalves0.3.01 of 1See more

sickchill bryanalves 0.3.0

1 of the 1 container images this version deploys carry CVE-2026-44405.

Container imageDigestPackageFixed in
linuxserver/sickchill:v2020.08.07-1-ls40e48b479c1891
paramiko@2.7.1
no fix listed

Open the chart page →

2,504
pagescamden-pages1.0.01 of 3See more

pages camden-pages 1.0.0

1 of the 3 container images this version deploys carry CVE-2026-44405.

Container imageDigestPackageFixed in
library/mysql:8.07dcddc01f13b
paramiko@4.0.0
no fix listed

Open the chart page →

20,190
ekorrecamptocamp30.1.11 of 1See more

ekorre camptocamp3 0.1.1

1 of the 1 container images this version deploys carry CVE-2026-44405.

Container imageDigestPackageFixed in
camptocamp/ekorre:0.1.035c91d5fda04
paramiko@2.7.1
no fix listed

Open the chart page →

3,891
pagescarina-pages1.0.01 of 3See more

pages carina-pages 1.0.0

1 of the 3 container images this version deploys carry CVE-2026-44405.

Container imageDigestPackageFixed in
library/mysql:8.07dcddc01f13b
paramiko@4.0.0
no fix listed

Open the chart page →

20,190
pagescarmel-pages-dell1.0.01 of 3See more

pages carmel-pages-dell 1.0.0

1 of the 3 container images this version deploys carry CVE-2026-44405.

Container imageDigestPackageFixed in
library/mysql:8.07dcddc01f13b
paramiko@4.0.0
no fix listed

Open the chart page →

20,190
chart-appchart-app0.3.01 of 2See more

chart-app chart-app 0.3.0

1 of the 2 container images this version deploys carry CVE-2026-44405.

Container imageDigestPackageFixed in
library/mysql:8b3b90af2a655
paramiko@4.0.0
no fix listed

Open the chart page →

1,775
chart-dnazarenochart-dnazareno0.1.01 of 3See more

chart-dnazareno chart-dnazareno 0.1.0

1 of the 3 container images this version deploys carry CVE-2026-44405.

Container imageDigestPackageFixed in
library/mysql:8b3b90af2a655
paramiko@4.0.0
no fix listed

Open the chart page →

5,778
check-mkcloudnativeapp0.2.11 of 1See more

check-mk cloudnativeapp 0.2.1

1 of the 1 container images this version deploys carry CVE-2026-44405.

Container imageDigestPackageFixed in
nlmacamp/check_mk:latest5dbb8589f824
paramiko@2.1.2
no fix listed

Open the chart page →

2,408
ibm-toolkit-installcloud-native-toolkit0.3.01 of 1See more

ibm-toolkit-install cloud-native-toolkit 0.3.0

1 of the 1 container images this version deploys carry CVE-2026-44405.

Container imageDigestPackageFixed in
quay.io/ibmgaragecloud/cli-tools:v0.159663f06adcb1
paramiko@2.10.3
no fix listed

Open the chart page →

6,695
iteration-zerocloud-native-toolkit0.2.01 of 1See more

iteration-zero cloud-native-toolkit 0.2.0

1 of the 1 container images this version deploys carry CVE-2026-44405.

Container imageDigestPackageFixed in
quay.io/cloudnativetoolkit/cli-tools:v1.1-v1.8.2d6fd2a9e3273
paramiko@2.11.0
no fix listed

Open the chart page →

6,921
cloudlaunchcloudve0.6.01 of 5See more

cloudlaunch cloudve 0.6.0

1 of the 5 container images this version deploys carry CVE-2026-44405.

Container imageDigestPackageFixed in
cloudve/cloudlaunch-server:latest4a3d7fae90bb
paramiko@2.8.0
no fix listed

Open the chart page →

12,457
cloudlaunch-servercloudve0.2.01 of 5See more

cloudlaunch-server cloudve 0.2.0

1 of the 5 container images this version deploys carry CVE-2026-44405.

Container imageDigestPackageFixed in
cloudve/cloudlaunch-server:latest4a3d7fae90bb
paramiko@2.8.0
no fix listed

Open the chart page →

12,131
cloudlaunchservercloudve0.6.01 of 4See more

cloudlaunchserver cloudve 0.6.0

1 of the 4 container images this version deploys carry CVE-2026-44405.

Container imageDigestPackageFixed in
cloudve/cloudlaunch-server:latest4a3d7fae90bb
paramiko@2.8.0
no fix listed

Open the chart page →

11,592
galaxykubemancloudve2.10.11 of 7See more

galaxykubeman cloudve 2.10.1

1 of the 7 container images this version deploys carry CVE-2026-44405.

Container imageDigestPackageFixed in
galaxy/cloudman-server:lateste5c265fe9fcd
paramiko@2.11.0
no fix listed

Open the chart page →

16,069
galaxy-stablecloudve2.0.02 of 5See more

galaxy-stable cloudve 2.0.0

2 of the 5 container images this version deploys carry CVE-2026-44405.

Container imageDigestPackageFixed in
galaxy/galaxy-init:v18.010267bad550e6
paramiko@1.10.1-1git1ubuntu0.1
paramiko@1.10.1
no fix listed
no fix listed
galaxy/galaxy-stable:v18.018e577a626dfd
paramiko@1.10.1-1git1ubuntu0.1
paramiko@1.10.1
no fix listed
no fix listed

Open the chart page →

70,895
pulsarcloudve0.2.01 of 2See more

pulsar cloudve 0.2.0

1 of the 2 container images this version deploys carry CVE-2026-44405.

Container imageDigestPackageFixed in
galaxy/pulsar-kubernetes:0.15.7e50a890e24c9
paramiko@3.5.1
no fix listed

Open the chart page →

6,162
authentikcluster-deploy0.2.01 of 1See more

authentik cluster-deploy 0.2.0

1 of the 1 container images this version deploys carry CVE-2026-44405.

Container imageDigestPackageFixed in
ghcr.io/goauthentik/server:2026.5.6ed120caf710c
paramiko@4.0.0
no fix listed

Open the chart page →

2,481
mysqlcomet-mysql-helmVerified publisher1.0.71 of 1See more

mysql comet-mysql-helm 1.0.7

1 of the 1 container images this version deploys carry CVE-2026-44405.

Container imageDigestPackageFixed in
library/mysql:8.4.2ac80b6e09e5b
paramiko@3.4.0
no fix listed

Open the chart page →

1,055
sumoconsensys0.4.1451 of 4See more

sumo consensys 0.4.145

1 of the 4 container images this version deploys carry CVE-2026-44405.

Container imageDigestPackageFixed in
confluentinc/cp-kafka:7.1.2.amd643bf359d5e340
paramiko@2.11.0
no fix listed

Open the chart page →

5,958
cp-helm-chartscp-helm-charts0.6.17 of 8See more

cp-helm-charts cp-helm-charts 0.6.1

7 of the 8 container images this version deploys carry CVE-2026-44405.

Container imageDigestPackageFixed in
confluentinc/cp-enterprise-control-center:6.1.0f2975d507a2a
paramiko@2.4.2
no fix listed
confluentinc/cp-enterprise-kafka:6.1.08f1544df1f48
paramiko@2.4.2
no fix listed
confluentinc/cp-kafka-connect:6.1.04bc70a83ca6f
paramiko@2.4.2
no fix listed
confluentinc/cp-kafka-rest:6.1.0b0b7aa26254a
paramiko@2.4.2
no fix listed
confluentinc/cp-ksqldb-server:6.1.0ee403d5b9090
paramiko@2.4.2
no fix listed
confluentinc/cp-schema-registry:6.1.0b651d4b6185a
paramiko@2.4.2
no fix listed
confluentinc/cp-zookeeper:6.1.078c190f4472c
paramiko@2.4.2
no fix listed

Open the chart page →

58,857
couchpotatocronce0.0.11 of 1See more

couchpotato cronce 0.0.1

1 of the 1 container images this version deploys carry CVE-2026-44405.

Container imageDigestPackageFixed in
linuxserver/couchpotato:75e576ee-ls389cd8d5fb1ac
paramiko@2.4.2
no fix listed

Open the chart page →

3,871
pagescrypticcode-helmchart1.0.01 of 3See more

pages crypticcode-helmchart 1.0.0

1 of the 3 container images this version deploys carry CVE-2026-44405.

Container imageDigestPackageFixed in
library/mysql:8.07dcddc01f13b
paramiko@4.0.0
no fix listed

Open the chart page →

20,190
pagesdalston-pages1.0.01 of 3See more

pages dalston-pages 1.0.0

1 of the 3 container images this version deploys carry CVE-2026-44405.

Container imageDigestPackageFixed in
library/mysql:8.07dcddc01f13b
paramiko@4.0.0
no fix listed

Open the chart page →

20,190
pagesdaman-dell-kuber1.0.01 of 3See more

pages daman-dell-kuber 1.0.0

1 of the 3 container images this version deploys carry CVE-2026-44405.

Container imageDigestPackageFixed in
library/mysql:8.07dcddc01f13b
paramiko@4.0.0
no fix listed

Open the chart page →

20,190
home-assistantdamounVerified publisher1.1.01 of 1See more

home-assistant damoun 1.1.0

1 of the 1 container images this version deploys carry CVE-2026-44405.

Container imageDigestPackageFixed in
ghcr.io/home-assistant/home-assistant:2023.11.3feffc0b8227d
paramiko@3.3.1
no fix listed

Open the chart page →

6,179
proxmox-exporterdamounVerified publisher1.10.01 of 1See more

proxmox-exporter damoun 1.10.0

1 of the 1 container images this version deploys carry CVE-2026-44405.

Container imageDigestPackageFixed in
prompve/prometheus-pve-exporter:3.4.2fcf041f0c24d
paramiko@3.4.0
no fix listed

Open the chart page →

1,141
redashdasmeta0.1.01 of 1See more

redash dasmeta 0.1.0

1 of the 1 container images this version deploys carry CVE-2026-44405.

Container imageDigestPackageFixed in
redash/redash:26.3.0c5c9148f5c38
paramiko@3.4.1
no fix listed

Open the chart page →

5,062
pagesdavid-pages1.0.01 of 3See more

pages david-pages 1.0.0

1 of the 3 container images this version deploys carry CVE-2026-44405.

Container imageDigestPackageFixed in
library/mysql:8.07dcddc01f13b
paramiko@4.0.0
no fix listed

Open the chart page →

20,190
pagesdebasish-pages1.0.01 of 3See more

pages debasish-pages 1.0.0

1 of the 3 container images this version deploys carry CVE-2026-44405.

Container imageDigestPackageFixed in
library/mysql:8.07dcddc01f13b
paramiko@4.0.0
no fix listed

Open the chart page →

20,190
supersetdeliveryheroVerified publisher1.1.31 of 1See more

superset deliveryhero 1.1.3

1 of the 1 container images this version deploys carry CVE-2026-44405.

Container imageDigestPackageFixed in
apache/superset:latest16b50bbef664
paramiko@3.5.1
no fix listed

Open the chart page →

2,305
mysqldev-krishan-dhaka-charts1.0.11 of 1See more

mysql dev-krishan-dhaka-charts 1.0.1

1 of the 1 container images this version deploys carry CVE-2026-44405.

Container imageDigestPackageFixed in
library/mysql:8.4b3b90af2a655
paramiko@4.0.0
no fix listed

Open the chart page →

463
pagesdipak1.0.01 of 3See more

pages dipak 1.0.0

1 of the 3 container images this version deploys carry CVE-2026-44405.

Container imageDigestPackageFixed in
library/mysql:8.07dcddc01f13b
paramiko@4.0.0
no fix listed

Open the chart page →

20,190
pgdump-to-s3duck-helm0.1.41 of 1See more

pgdump-to-s3 duck-helm 0.1.4

1 of the 1 container images this version deploys carry CVE-2026-44405.

Container imageDigestPackageFixed in
ghcr.io/ducksify/pgdump-to-s3:latestc42c0946bd0f
paramiko@2.11.0
no fix listed

Open the chart page →

1,362
pagesedgwarepages1.0.01 of 3See more

pages edgwarepages 1.0.0

1 of the 3 container images this version deploys carry CVE-2026-44405.

Container imageDigestPackageFixed in
library/mysql:8.07dcddc01f13b
paramiko@4.0.0
no fix listed

Open the chart page →

20,190
home-assistantegebackVerified publisher2.0.351 of 1See more

home-assistant egeback 2.0.35

1 of the 1 container images this version deploys carry CVE-2026-44405.

Container imageDigestPackageFixed in
ghcr.io/home-assistant/home-assistant:2026.8.256690a89c79a
paramiko@3.5.0
no fix listed

Open the chart page →

2,158

Container images carrying it

134 by charts deploying them

A fixed version is listed for 0 of the 2 affected packages.

Container imageDigestPackageFixed inUsed by
library/mysql:8.07dcddc01f13b
paramiko@4.0.0
no fix listed
89
library/mysql:5.74bc6bc963e6d
paramiko@2.11.0
no fix listed
22
library/mysql:8:8.4:8.4.11b3b90af2a655
paramiko@4.0.0
no fix listed
16
library/mysql:9.7.2257388edf9c8
paramiko@4.0.0
no fix listed
6
dpage/pgadmin4:9.17:latest2f4ce946ddf8
paramiko@3.5.1
no fix listed
5
apache/superset:6.1.0:latest16b50bbef664
paramiko@3.5.1
no fix listed
3
cloudve/cloudlaunch-server:latest4a3d7fae90bb
paramiko@2.8.0
no fix listed
3
dpage/pgadmin4:6.12781369df9994
paramiko@2.11.0
no fix listed
3
mysql/mysql-server:latestd6c8301b7834
paramiko@2.11.0
no fix listed
3
confluentinc/cp-kafka:6.2.11-1-ubi8ac776fad95a5
paramiko@2.12.0
no fix listed
2
confluentinc/cp-zookeeper:6.2.11-1-ubi8cae577096489
paramiko@2.12.0
no fix listed
2
library/mysql:8.2.0212fe73edca5
paramiko@2.11.0
no fix listed
2
library/mysql:8.4.2ac80b6e09e5b
paramiko@3.4.0
no fix listed
2
library/mysql:9.7.2b2cf29815e62
paramiko@4.0.0
no fix listed
2
omecproject/mcord-synchronizer:comac-1.0.0cfdb566dd949
paramiko@2.4.2
no fix listed
2
ghcr.io/home-assistant/home-assistant:2026.9.1:latest612d76760b54
paramiko@3.5.0
no fix listed
2
ghcr.io/home-assistant/home-assistant:2026.9.2a1bc133af84e
paramiko@3.5.0
no fix listed
2
abhinavsingh/proxy.py:latest51adc989fd03
paramiko@3.4.0
no fix listed
1
amd64/mysql:5.7e20a653e0f51
paramiko@2.11.0
no fix listed
1
ansiblesemaphore/semaphore:v2.8.5303d1f8684027
paramiko@2.7.2
no fix listed
1
apache/airflow:2.8.4-python3.964e58748b6b9
paramiko@3.4.0
no fix listed
1
apache/airflow:2.10.2-python3.9ce90bdc3d2af
paramiko@3.5.0
no fix listed
1
apache/airflow:2.8.1e5560ad0b86e
paramiko@3.4.0
no fix listed
1
apache/superset:4.0.1ab9467fd712c
paramiko@3.4.0
no fix listed
1
assistiot/authorization_db:latestc3adbab6a3e7
paramiko@2.11.0
no fix listed
1
beanbag/reviewboard:latest6b840f546e1c
paramiko@3.4.1
no fix listed
1
berkeleyskypilot/skypilot:0.13.03bc8bf8f4d83
paramiko@3.5.1
no fix listed
1
berkeleyskypilot/skypilot-nightly:latest8da2f3cda472
paramiko@3.5.1
no fix listed
1
camptocamp/ekorre:0.1.035c91d5fda04
paramiko@2.7.1
no fix listed
1
cccs/assemblyline-core:4.7.4.stable177c3c25d4d6e0
paramiko@3.5.1
no fix listed
1
cccs/assemblyline-socketio:4.7.4.stable1724646dbfd944
paramiko@3.5.1
no fix listed
1
cccs/assemblyline-ui:4.7.4.stable171a7a103668f5
paramiko@3.5.1
no fix listed
1
checkmk/check-mk-community:2.5.0p6c11b422210c4
paramiko@4.0.0
no fix listed
1
chorss/docker-pgadmin4:4.115c549cacb8ab
paramiko@2.6.0
no fix listed
1
confluentinc/cp-enterprise-control-center:6.1.0f2975d507a2a
paramiko@2.4.2
no fix listed
1
confluentinc/cp-enterprise-kafka:6.1.08f1544df1f48
paramiko@2.4.2
no fix listed
1
confluentinc/cp-kafka:7.1.2.amd643bf359d5e340
paramiko@2.11.0
no fix listed
1
confluentinc/cp-kafka:7.4.4c0224a1adf7a
paramiko@2.12.0
no fix listed
1
confluentinc/cp-kafka:7.5.1dc9b972db002
paramiko@2.12.0
no fix listed
1
confluentinc/cp-kafka-connect:6.1.04bc70a83ca6f
paramiko@2.4.2
no fix listed
1
confluentinc/cp-kafka-rest:6.1.0b0b7aa26254a
paramiko@2.4.2
no fix listed
1
confluentinc/cp-ksqldb-server:7.6.08ec46c27982f
paramiko@3.4.0
no fix listed
1
confluentinc/cp-ksqldb-server:6.1.0ee403d5b9090
paramiko@2.4.2
no fix listed
1
confluentinc/cp-schema-registry:6.1.0b651d4b6185a
paramiko@2.4.2
no fix listed
1
confluentinc/cp-zookeeper:7.5.10bec03c1f3ce
paramiko@2.12.0
no fix listed
1
confluentinc/cp-zookeeper:6.1.078c190f4472c
paramiko@2.4.2
no fix listed
1
dannielkil/book-db:latest433290c5c1db
paramiko@3.4.0
no fix listed
1
datadog/agent:7.22.08f20e56b5311
paramiko@2.6.0
no fix listed
1
datadog/agent:6aad9994de6a7
paramiko@2.12.0
no fix listed
1
deepflowce/mysql:8.0.313d7ae561cf60
paramiko@2.11.0
no fix listed
1

syft 1.42.1 · advisories as of 14 Sept 2026

Corrections: contact@stackradar.io

Catalogue: Artifact Hub · Advisories: OSV · Exploitation: FIRST EPSS, CISA KEV.