StackRadar

CVE-2026-44405

Low

Advisory

Published 6 May 2026In the index since 5 Sept 2026
Severity
Low
worst across findings
CVSS
3.4
base score, highest
EPSS
0.001
2nd percentile
CISA KEV
Not listed
no confirmed exploitation
Charts affected
256
of 17,781 indexed, latest versions
Container images
134
deployed by those charts
Fix available
None
affected packages

Paramiko rsakey.py allows the SHA-1 algorithm

Carried by container images the latest versions of 256 of 17,781 indexed charts deploy, on 134 images.

Affected packageAffected versionsFixed inImages
paramikopypi1.10.1, 2.1.2, 2.4.2, 2.6.0+17 moreno fix listed134
paramikodeb1.10.1-1git1ubuntu0.1no fix listed2
OSV records
GHSA-r374-rxx8-8654UBUNTU-CVE-2026-44405
Also known as
PYSEC-2026-2858

Charts affected

256 by stars
ChartLatestAffected imagesRadar Score
pgadmin4eks-storageclass0.1.01 of 2See more

pgadmin4 eks-storageclass 0.1.0

1 of the 2 container images this version deploys carry CVE-2026-44405.

Container imageDigestPackageFixed in
dpage/pgadmin4:latest2f4ce946ddf8
paramiko@3.5.1
no fix listed

Open the chart page →

398
eoloPlanteolo-plannerVerified publisher0.1.01 of 7See more

eoloPlant eolo-planner 0.1.0

1 of the 7 container images this version deploys carry CVE-2026-44405.

Container imageDigestPackageFixed in
library/mysql:8b3b90af2a655
paramiko@4.0.0
no fix listed

Open the chart page →

27,537
eoloPlannerCommunicationsKubernetes3eoloplannercommunicationskuberneteshelmVerified publisher0.1.01 of 7See more

eoloPlannerCommunicationsKubernetes3 eoloplannercommunicationskuberneteshelm 0.1.0

1 of the 7 container images this version deploys carry CVE-2026-44405.

Container imageDigestPackageFixed in
library/mysql:8b3b90af2a655
paramiko@4.0.0
no fix listed

Open the chart page →

27,537
eoloplanteoloplant1.0.01 of 7See more

eoloplant eoloplant 1.0.0

1 of the 7 container images this version deploys carry CVE-2026-44405.

Container imageDigestPackageFixed in
library/mysql:8b3b90af2a655
paramiko@4.0.0
no fix listed

Open the chart page →

27,537
escvmschedulerescvmscheduler1.0.71 of 3See more

escvmscheduler escvmscheduler 1.0.7

1 of the 3 container images this version deploys carry CVE-2026-44405.

Container imageDigestPackageFixed in
library/mysql:5.74bc6bc963e6d
paramiko@2.11.0
no fix listed

Open the chart page →

4,678
datadog-apmfairwinds-incubator2.0.01 of 1See more

datadog-apm fairwinds-incubator 2.0.0

1 of the 1 container images this version deploys carry CVE-2026-44405.

Container imageDigestPackageFixed in
public.ecr.aws/datadog/agent:7.73.0f4925b15ce94
paramiko@3.5.1
no fix listed

Open the chart page →

2,785
azure-pipelines-agentfermosit0.0.11 of 1See more

azure-pipelines-agent fermosit 0.0.1

1 of the 1 container images this version deploys carry CVE-2026-44405.

Container imageDigestPackageFixed in
jmferrer/azure-devops-agent:latest030f68ec6998
paramiko@2.6.0
no fix listed

Open the chart page →

14,673
infrafibonacci-cluster-infraVerified publisher1.0.01 of 4See more

infra fibonacci-cluster-infra 1.0.0

1 of the 4 container images this version deploys carry CVE-2026-44405.

Container imageDigestPackageFixed in
dpage/pgadmin4:8.418cd5711fc9a
paramiko@3.4.0
no fix listed

Open the chart page →

12,454
flask-contactsfirst-idror-chart1.0.11 of 3See more

flask-contacts first-idror-chart 1.0.1

1 of the 3 container images this version deploys carry CVE-2026-44405.

Container imageDigestPackageFixed in
library/mysql:8.07dcddc01f13b
paramiko@4.0.0
no fix listed

Open the chart page →

5,704
batchrunnerflanksourceVerified publisher1.0.441 of 1See more

batchrunner flanksource 1.0.44

1 of the 1 container images this version deploys carry CVE-2026-44405.

Container imageDigestPackageFixed in
flanksource/batch-runner:v1.0.44689687a7cf95
paramiko@3.5.0
no fix listed

Open the chart page →

5,292
flask-contactsflask-contacts-generic1.0.11 of 3See more

flask-contacts flask-contacts-generic 1.0.1

1 of the 3 container images this version deploys carry CVE-2026-44405.

Container imageDigestPackageFixed in
library/mysql:8.07dcddc01f13b
paramiko@4.0.0
no fix listed

Open the chart page →

5,704
flask-appflask-mysqlVerified publisher1.0.11 of 2See more

flask-app flask-mysql 1.0.1

1 of the 2 container images this version deploys carry CVE-2026-44405.

Container imageDigestPackageFixed in
library/mysql:5.74bc6bc963e6d
paramiko@2.11.0
no fix listed

Open the chart page →

4,073
pagesgary-pages1.0.01 of 3See more

pages gary-pages 1.0.0

1 of the 3 container images this version deploys carry CVE-2026-44405.

Container imageDigestPackageFixed in
library/mysql:8.07dcddc01f13b
paramiko@4.0.0
no fix listed

Open the chart page →

20,190
skypilotgeek-cookbookVerified publisher0.0.11 of 3See more

skypilot geek-cookbook 0.0.1

1 of the 3 container images this version deploys carry CVE-2026-44405.

Container imageDigestPackageFixed in
berkeleyskypilot/skypilot-nightly:latest8da2f3cda472
paramiko@3.5.1
no fix listed

Open the chart page →

8,923
wallabaggeek-cookbookVerified publisher7.2.01 of 1See more

wallabag geek-cookbook 7.2.0

1 of the 1 container images this version deploys carry CVE-2026-44405.

Container imageDigestPackageFixed in
wallabag/wallabag:2.4.25e4c26a7fb4a
paramiko@2.7.1
no fix listed

Open the chart page →

4,358
mysqlgengxiankun-charts0.2.01 of 1See more

mysql gengxiankun-charts 0.2.0

1 of the 1 container images this version deploys carry CVE-2026-44405.

Container imageDigestPackageFixed in
library/mysql:8.07dcddc01f13b
paramiko@4.0.0
no fix listed

Open the chart page →

463
mysqlgroundhog2k3.1.41 of 1See more

mysql groundhog2k 3.1.4

1 of the 1 container images this version deploys carry CVE-2026-44405.

Container imageDigestPackageFixed in
library/mysql:9.7.2257388edf9c8
paramiko@4.0.0
no fix listed

Open the chart page →

463
pgadminhalkeye1.0.01 of 1See more

pgadmin halkeye 1.0.0

1 of the 1 container images this version deploys carry CVE-2026-44405.

Container imageDigestPackageFixed in
chorss/docker-pgadmin4:4.115c549cacb8ab
paramiko@2.6.0
no fix listed

Open the chart page →

2,555
pageshelm-chart-repos-camden1.0.01 of 3See more

pages helm-chart-repos-camden 1.0.0

1 of the 3 container images this version deploys carry CVE-2026-44405.

Container imageDigestPackageFixed in
library/mysql:8.07dcddc01f13b
paramiko@4.0.0
no fix listed

Open the chart page →

20,190
home-assistanthelm-chart-roeiVerified publisher2025.3.01 of 1See more

home-assistant helm-chart-roei 2025.3.0

1 of the 1 container images this version deploys carry CVE-2026-44405.

Container imageDigestPackageFixed in
ghcr.io/home-assistant/home-assistant:2025.3.026c51e44d932
paramiko@3.5.0
no fix listed

Open the chart page →

4,647
supersethelm-charts-nr1.1.31 of 1See more

superset helm-charts-nr 1.1.3

1 of the 1 container images this version deploys carry CVE-2026-44405.

Container imageDigestPackageFixed in
apache/superset:latest16b50bbef664
paramiko@3.5.1
no fix listed

Open the chart page →

2,305
dbapphelmcourseVerified publisher0.3.31 of 2See more

dbapp helmcourse 0.3.3

1 of the 2 container images this version deploys carry CVE-2026-44405.

Container imageDigestPackageFixed in
library/mysql:5.74bc6bc963e6d
paramiko@2.11.0
no fix listed

Open the chart page →

3,971
mysqlhelmcourseVerified publisher0.2.41 of 1See more

mysql helmcourse 0.2.4

1 of the 1 container images this version deploys carry CVE-2026-44405.

Container imageDigestPackageFixed in
library/mysql:5.74bc6bc963e6d
paramiko@2.11.0
no fix listed

Open the chart page →

1,518
chart-bookhelm-deploy-book0.1.01 of 3See more

chart-book helm-deploy-book 0.1.0

1 of the 3 container images this version deploys carry CVE-2026-44405.

Container imageDigestPackageFixed in
dannielkil/book-db:latest433290c5c1db
paramiko@3.4.0
no fix listed

Open the chart page →

9,122
discount-bandithelmforgeVerified publisher2.0.81 of 3See more

discount-bandit helmforge 2.0.8

1 of the 3 container images this version deploys carry CVE-2026-44405.

Container imageDigestPackageFixed in
library/mysql:9.7.2257388edf9c8
paramiko@4.0.0
no fix listed

Open the chart page →

29,817
drupalhelmforgeVerified publisher1.2.131 of 2See more

drupal helmforge 1.2.13

1 of the 2 container images this version deploys carry CVE-2026-44405.

Container imageDigestPackageFixed in
library/mysql:9.7.2b2cf29815e62
paramiko@4.0.0
no fix listed

Open the chart page →

3,802
ghosthelmforgeVerified publisher1.2.61 of 3See more

ghost helmforge 1.2.6

1 of the 3 container images this version deploys carry CVE-2026-44405.

Container imageDigestPackageFixed in
library/mysql:8.4.113466ba4a4828
paramiko@4.0.0
no fix listed

Open the chart page →

2,463
mysqlhelmforgeVerified publisher2.0.31 of 1See more

mysql helmforge 2.0.3

1 of the 1 container images this version deploys carry CVE-2026-44405.

Container imageDigestPackageFixed in
library/mysql:9.7.2257388edf9c8
paramiko@4.0.0
no fix listed

Open the chart page →

463
supersethelmforgeVerified publisher1.3.61 of 5See more

superset helmforge 1.3.6

1 of the 5 container images this version deploys carry CVE-2026-44405.

Container imageDigestPackageFixed in
apache/superset:6.1.016b50bbef664
paramiko@3.5.1
no fix listed

Open the chart page →

5,714
pageshelm-repo1.0.01 of 3See more

pages helm-repo 1.0.0

1 of the 3 container images this version deploys carry CVE-2026-44405.

Container imageDigestPackageFixed in
library/mysql:8.07dcddc01f13b
paramiko@4.0.0
no fix listed

Open the chart page →

20,190
ibexaibexaVerified publisher3.11.11 of 10See more

ibexa ibexa 3.11.1

1 of the 10 container images this version deploys carry CVE-2026-44405.

Container imageDigestPackageFixed in
library/mysql:8.0.41bf577825b52a
paramiko@3.4.0
no fix listed

Open the chart page →

5,959
pgadmininseefrlab3.2.01 of 1See more

pgadmin inseefrlab 3.2.0

1 of the 1 container images this version deploys carry CVE-2026-44405.

Container imageDigestPackageFixed in
dpage/pgadmin4:latest2f4ce946ddf8
paramiko@3.5.1
no fix listed

Open the chart page →

398
redashinseefrlab2.1.01 of 3See more

redash inseefrlab 2.1.0

1 of the 3 container images this version deploys carry CVE-2026-44405.

Container imageDigestPackageFixed in
redash/redash:10.0.0.b503639392753c0376
paramiko@2.7.2
no fix listed

Open the chart page →

3,314
jx-app-datadogjenkins-x0.0.101 of 2See more

jx-app-datadog jenkins-x 0.0.10

1 of the 2 container images this version deploys carry CVE-2026-44405.

Container imageDigestPackageFixed in
datadog/agent:6aad9994de6a7
paramiko@2.12.0
no fix listed

Open the chart page →

3,999
authentikkagiso-me0.1.11 of 1See more

authentik kagiso-me 0.1.1

1 of the 1 container images this version deploys carry CVE-2026-44405.

Container imageDigestPackageFixed in
ghcr.io/goauthentik/server:2026.2.146a71d75dfd3
paramiko@4.0.0
no fix listed

Open the chart page →

4,568
home-assistantkfirfer0.5.41 of 1See more

home-assistant kfirfer 0.5.4

1 of the 1 container images this version deploys carry CVE-2026-44405.

Container imageDigestPackageFixed in
homeassistant/home-assistant:2023.10.3021e2afc6e57
paramiko@3.3.1
no fix listed

Open the chart page →

6,447
kimai-helmchartkimai2tet0.1.01 of 2See more

kimai-helmchart kimai2tet 0.1.0

1 of the 2 container images this version deploys carry CVE-2026-44405.

Container imageDigestPackageFixed in
library/mysql:5.74bc6bc963e6d
paramiko@2.11.0
no fix listed

Open the chart page →

1,518
ghostkubernetes-homelab-helm-chartsVerified publisher0.1.21 of 2See more

ghost kubernetes-homelab-helm-charts 0.1.2

1 of the 2 container images this version deploys carry CVE-2026-44405.

Container imageDigestPackageFixed in
library/mysql:8b3b90af2a655
paramiko@4.0.0
no fix listed

Open the chart page →

2,756
pve-exporterkubernetes-homelab-helm-chartsVerified publisher0.1.01 of 1See more

pve-exporter kubernetes-homelab-helm-charts 0.1.0

1 of the 1 container images this version deploys carry CVE-2026-44405.

Container imageDigestPackageFixed in
prompve/prometheus-pve-exporter:3.8.2e3d501a82df5
paramiko@4.0.0
no fix listed

Open the chart page →

994
deepflowkubesphere-stable6.2.6061 of 8See more

deepflow kubesphere-stable 6.2.606

1 of the 8 container images this version deploys carry CVE-2026-44405.

Container imageDigestPackageFixed in
deepflowce/mysql:8.0.313d7ae561cf60
paramiko@2.11.0
no fix listed

Open the chart page →

18,316
kube-wordpress-mysqlkube-wordpress-mysql0.1.01 of 2See more

kube-wordpress-mysql kube-wordpress-mysql 0.1.0

1 of the 2 container images this version deploys carry CVE-2026-44405.

Container imageDigestPackageFixed in
library/mysql:5.74bc6bc963e6d
paramiko@2.11.0
no fix listed

Open the chart page →

8,698
kusionkusionstackVerified publisher0.14.11 of 3See more

kusion kusionstack 0.14.1

1 of the 3 container images this version deploys carry CVE-2026-44405.

Container imageDigestPackageFixed in
library/mysql:8.07dcddc01f13b
paramiko@4.0.0
no fix listed

Open the chart page →

6,824
pageslatif-pages1.0.01 of 3See more

pages latif-pages 1.0.0

1 of the 3 container images this version deploys carry CVE-2026-44405.

Container imageDigestPackageFixed in
library/mysql:8.07dcddc01f13b
paramiko@4.0.0
no fix listed

Open the chart page →

20,190
pageslavanya-pages1.0.01 of 3See more

pages lavanya-pages 1.0.0

1 of the 3 container images this version deploys carry CVE-2026-44405.

Container imageDigestPackageFixed in
library/mysql:8.07dcddc01f13b
paramiko@4.0.0
no fix listed

Open the chart page →

20,190
librenmslibrenms10.1.11 of 5See more

librenms librenms 10.1.1

1 of the 5 container images this version deploys carry CVE-2026-44405.

Container imageDigestPackageFixed in
library/mysql:9.7.2257388edf9c8
paramiko@4.0.0
no fix listed

Open the chart page →

3,126
pagesliviu884422-pages1.0.01 of 3See more

pages liviu884422-pages 1.0.0

1 of the 3 container images this version deploys carry CVE-2026-44405.

Container imageDigestPackageFixed in
library/mysql:8.07dcddc01f13b
paramiko@4.0.0
no fix listed

Open the chart page →

20,190
home-assistantlmatfyVerified publisher0.1.381 of 1See more

home-assistant lmatfy 0.1.38

1 of the 1 container images this version deploys carry CVE-2026-44405.

Container imageDigestPackageFixed in
homeassistant/home-assistant:2026.75a531753cea9
paramiko@3.5.0
no fix listed

Open the chart page →

2,444
nightingalelogic3579Verified publisher0.3.11 of 6See more

nightingale logic3579 0.3.1

1 of the 6 container images this version deploys carry CVE-2026-44405.

Container imageDigestPackageFixed in
library/mysql:5.74bc6bc963e6d
paramiko@2.11.0
no fix listed

Open the chart page →

8,938
hyperglassm0nsterrr-hyperglassVerified publisher4.2.11 of 2See more

hyperglass m0nsterrr-hyperglass 4.2.1

1 of the 2 container images this version deploys carry CVE-2026-44405.

Container imageDigestPackageFixed in
ghcr.io/m0nsterrr/hyperglass:v2.0.4f7b5d20c5e42
paramiko@3.4.0
no fix listed

Open the chart page →

4,647
demoshopmakaira2.4.01 of 4See more

demoshop makaira 2.4.0

1 of the 4 container images this version deploys carry CVE-2026-44405.

Container imageDigestPackageFixed in
library/mysql:8b3b90af2a655
paramiko@4.0.0
no fix listed

Open the chart page →

4,401

Container images carrying it

134 by charts deploying them

A fixed version is listed for 0 of the 2 affected packages.

Container imageDigestPackageFixed inUsed by
library/mysql:8.07dcddc01f13b
paramiko@4.0.0
no fix listed
89
library/mysql:5.74bc6bc963e6d
paramiko@2.11.0
no fix listed
22
library/mysql:8:8.4:8.4.11b3b90af2a655
paramiko@4.0.0
no fix listed
16
library/mysql:9.7.2257388edf9c8
paramiko@4.0.0
no fix listed
6
dpage/pgadmin4:9.17:latest2f4ce946ddf8
paramiko@3.5.1
no fix listed
5
apache/superset:6.1.0:latest16b50bbef664
paramiko@3.5.1
no fix listed
3
cloudve/cloudlaunch-server:latest4a3d7fae90bb
paramiko@2.8.0
no fix listed
3
dpage/pgadmin4:6.12781369df9994
paramiko@2.11.0
no fix listed
3
mysql/mysql-server:latestd6c8301b7834
paramiko@2.11.0
no fix listed
3
confluentinc/cp-kafka:6.2.11-1-ubi8ac776fad95a5
paramiko@2.12.0
no fix listed
2
confluentinc/cp-zookeeper:6.2.11-1-ubi8cae577096489
paramiko@2.12.0
no fix listed
2
library/mysql:8.2.0212fe73edca5
paramiko@2.11.0
no fix listed
2
library/mysql:8.4.2ac80b6e09e5b
paramiko@3.4.0
no fix listed
2
library/mysql:9.7.2b2cf29815e62
paramiko@4.0.0
no fix listed
2
omecproject/mcord-synchronizer:comac-1.0.0cfdb566dd949
paramiko@2.4.2
no fix listed
2
ghcr.io/home-assistant/home-assistant:2026.9.1:latest612d76760b54
paramiko@3.5.0
no fix listed
2
ghcr.io/home-assistant/home-assistant:2026.9.2a1bc133af84e
paramiko@3.5.0
no fix listed
2
abhinavsingh/proxy.py:latest51adc989fd03
paramiko@3.4.0
no fix listed
1
amd64/mysql:5.7e20a653e0f51
paramiko@2.11.0
no fix listed
1
ansiblesemaphore/semaphore:v2.8.5303d1f8684027
paramiko@2.7.2
no fix listed
1
apache/airflow:2.8.4-python3.964e58748b6b9
paramiko@3.4.0
no fix listed
1
apache/airflow:2.10.2-python3.9ce90bdc3d2af
paramiko@3.5.0
no fix listed
1
apache/airflow:2.8.1e5560ad0b86e
paramiko@3.4.0
no fix listed
1
apache/superset:4.0.1ab9467fd712c
paramiko@3.4.0
no fix listed
1
assistiot/authorization_db:latestc3adbab6a3e7
paramiko@2.11.0
no fix listed
1
beanbag/reviewboard:latest6b840f546e1c
paramiko@3.4.1
no fix listed
1
berkeleyskypilot/skypilot:0.13.03bc8bf8f4d83
paramiko@3.5.1
no fix listed
1
berkeleyskypilot/skypilot-nightly:latest8da2f3cda472
paramiko@3.5.1
no fix listed
1
camptocamp/ekorre:0.1.035c91d5fda04
paramiko@2.7.1
no fix listed
1
cccs/assemblyline-core:4.7.4.stable177c3c25d4d6e0
paramiko@3.5.1
no fix listed
1
cccs/assemblyline-socketio:4.7.4.stable1724646dbfd944
paramiko@3.5.1
no fix listed
1
cccs/assemblyline-ui:4.7.4.stable171a7a103668f5
paramiko@3.5.1
no fix listed
1
checkmk/check-mk-community:2.5.0p6c11b422210c4
paramiko@4.0.0
no fix listed
1
chorss/docker-pgadmin4:4.115c549cacb8ab
paramiko@2.6.0
no fix listed
1
confluentinc/cp-enterprise-control-center:6.1.0f2975d507a2a
paramiko@2.4.2
no fix listed
1
confluentinc/cp-enterprise-kafka:6.1.08f1544df1f48
paramiko@2.4.2
no fix listed
1
confluentinc/cp-kafka:7.1.2.amd643bf359d5e340
paramiko@2.11.0
no fix listed
1
confluentinc/cp-kafka:7.4.4c0224a1adf7a
paramiko@2.12.0
no fix listed
1
confluentinc/cp-kafka:7.5.1dc9b972db002
paramiko@2.12.0
no fix listed
1
confluentinc/cp-kafka-connect:6.1.04bc70a83ca6f
paramiko@2.4.2
no fix listed
1
confluentinc/cp-kafka-rest:6.1.0b0b7aa26254a
paramiko@2.4.2
no fix listed
1
confluentinc/cp-ksqldb-server:7.6.08ec46c27982f
paramiko@3.4.0
no fix listed
1
confluentinc/cp-ksqldb-server:6.1.0ee403d5b9090
paramiko@2.4.2
no fix listed
1
confluentinc/cp-schema-registry:6.1.0b651d4b6185a
paramiko@2.4.2
no fix listed
1
confluentinc/cp-zookeeper:7.5.10bec03c1f3ce
paramiko@2.12.0
no fix listed
1
confluentinc/cp-zookeeper:6.1.078c190f4472c
paramiko@2.4.2
no fix listed
1
dannielkil/book-db:latest433290c5c1db
paramiko@3.4.0
no fix listed
1
datadog/agent:7.22.08f20e56b5311
paramiko@2.6.0
no fix listed
1
datadog/agent:6aad9994de6a7
paramiko@2.12.0
no fix listed
1
deepflowce/mysql:8.0.313d7ae561cf60
paramiko@2.11.0
no fix listed
1

syft 1.42.1 · advisories as of 14 Sept 2026

Corrections: contact@stackradar.io

Catalogue: Artifact Hub · Advisories: OSV · Exploitation: FIRST EPSS, CISA KEV.