StackRadar

CVE-2026-44405

Low

Advisory

Published 6 May 2026In the index since 5 Sept 2026
Severity
Low
worst across findings
CVSS
3.4
base score, highest
EPSS
0.001
2nd percentile
CISA KEV
Not listed
no confirmed exploitation
Charts affected
256
of 17,781 indexed, latest versions
Container images
134
deployed by those charts
Fix available
None
affected packages

Paramiko rsakey.py allows the SHA-1 algorithm

Carried by container images the latest versions of 256 of 17,781 indexed charts deploy, on 134 images.

Affected packageAffected versionsFixed inImages
paramikopypi1.10.1, 2.1.2, 2.4.2, 2.6.0+17 moreno fix listed134
paramikodeb1.10.1-1git1ubuntu0.1no fix listed2
OSV records
GHSA-r374-rxx8-8654UBUNTU-CVE-2026-44405
Also known as
PYSEC-2026-2858

Charts affected

256 by stars
ChartLatestAffected imagesRadar Score
pagespages-ssharma09091.0.01 of 3See more

pages pages-ssharma0909 1.0.0

1 of the 3 container images this version deploys carry CVE-2026-44405.

Container imageDigestPackageFixed in
library/mysql:8.07dcddc01f13b
paramiko@4.0.0
no fix listed

Open the chart page →

20,190
pagespages-sucharitha1.0.01 of 3See more

pages pages-sucharitha 1.0.0

1 of the 3 container images this version deploys carry CVE-2026-44405.

Container imageDigestPackageFixed in
library/mysql:8.07dcddc01f13b
paramiko@4.0.0
no fix listed

Open the chart page →

20,190
pagespages-sudhir1.0.01 of 3See more

pages pages-sudhir 1.0.0

1 of the 3 container images this version deploys carry CVE-2026-44405.

Container imageDigestPackageFixed in
library/mysql:8.07dcddc01f13b
paramiko@4.0.0
no fix listed

Open the chart page →

20,190
pagespages-sushi1.0.01 of 3See more

pages pages-sushi 1.0.0

1 of the 3 container images this version deploys carry CVE-2026-44405.

Container imageDigestPackageFixed in
library/mysql:8.07dcddc01f13b
paramiko@4.0.0
no fix listed

Open the chart page →

20,190
pagespages-vasanth58141.0.01 of 3See more

pages pages-vasanth5814 1.0.0

1 of the 3 container images this version deploys carry CVE-2026-44405.

Container imageDigestPackageFixed in
library/mysql:8.07dcddc01f13b
paramiko@4.0.0
no fix listed

Open the chart page →

20,190
pagespages-vjp1.0.01 of 3See more

pages pages-vjp 1.0.0

1 of the 3 container images this version deploys carry CVE-2026-44405.

Container imageDigestPackageFixed in
library/mysql:8.07dcddc01f13b
paramiko@4.0.0
no fix listed

Open the chart page →

20,190
home-assistantpascaliskeVerified publisher0.1.11 of 1See more

home-assistant pascaliske 0.1.1

1 of the 1 container images this version deploys carry CVE-2026-44405.

Container imageDigestPackageFixed in
ghcr.io/home-assistant/home-assistant:2025.12.59a5a3eb4a213
paramiko@3.5.0
no fix listed

Open the chart page →

4,749
pagespawan-pages1.0.01 of 3See more

pages pawan-pages 1.0.0

1 of the 3 container images this version deploys carry CVE-2026-44405.

Container imageDigestPackageFixed in
library/mysql:8.07dcddc01f13b
paramiko@4.0.0
no fix listed

Open the chart page →

20,190
pagespighosh-pages1.0.01 of 3See more

pages pighosh-pages 1.0.0

1 of the 3 container images this version deploys carry CVE-2026-44405.

Container imageDigestPackageFixed in
library/mysql:8.07dcddc01f13b
paramiko@4.0.0
no fix listed

Open the chart page →

20,190
practica-helmpractica-helm0.1.01 of 7See more

practica-helm practica-helm 0.1.0

1 of the 7 container images this version deploys carry CVE-2026-44405.

Container imageDigestPackageFixed in
library/mysql:5.74bc6bc963e6d
paramiko@2.11.0
no fix listed

Open the chart page →

28,484
pagesprasanthi1.0.01 of 3See more

pages prasanthi 1.0.0

1 of the 3 container images this version deploys carry CVE-2026-44405.

Container imageDigestPackageFixed in
library/mysql:8.07dcddc01f13b
paramiko@4.0.0
no fix listed

Open the chart page →

20,190
wp-chartprojet-devops0.1.01 of 2See more

wp-chart projet-devops 0.1.0

1 of the 2 container images this version deploys carry CVE-2026-44405.

Container imageDigestPackageFixed in
library/mysql:5.74bc6bc963e6d
paramiko@2.11.0
no fix listed

Open the chart page →

5,203
flaskDiaryptj-miniproject2.1.21 of 2See more

flaskDiary ptj-miniproject 2.1.2

1 of the 2 container images this version deploys carry CVE-2026-44405.

Container imageDigestPackageFixed in
library/mysql:8.07dcddc01f13b
paramiko@4.0.0
no fix listed

Open the chart page →

3,071
cdmswebapppyalive-cdmswebappVerified publisher0.1.01 of 3See more

cdmswebapp pyalive-cdmswebapp 0.1.0

1 of the 3 container images this version deploys carry CVE-2026-44405.

Container imageDigestPackageFixed in
library/mysql:5.74bc6bc963e6d
paramiko@2.11.0
no fix listed

Open the chart page →

6,668
rada-platformrada-platform0.1.01 of 7See more

rada-platform rada-platform 0.1.0

1 of the 7 container images this version deploys carry CVE-2026-44405.

Container imageDigestPackageFixed in
apache/airflow:2.10.2-python3.9ce90bdc3d2af
paramiko@3.5.0
no fix listed

Open the chart page →

21,211
radar-cp-ksql-serverradar-baseVerified publisher0.0.21 of 2See more

radar-cp-ksql-server radar-base 0.0.2

1 of the 2 container images this version deploys carry CVE-2026-44405.

Container imageDigestPackageFixed in
confluentinc/cp-ksqldb-server:7.6.08ec46c27982f
paramiko@3.4.0
no fix listed

Open the chart page →

5,269
pagesranjinigogga1.0.01 of 3See more

pages ranjinigogga 1.0.0

1 of the 3 container images this version deploys carry CVE-2026-44405.

Container imageDigestPackageFixed in
library/mysql:8.07dcddc01f13b
paramiko@4.0.0
no fix listed

Open the chart page →

20,190
pagesrebecca-pages1.0.01 of 3See more

pages rebecca-pages 1.0.0

1 of the 3 container images this version deploys carry CVE-2026-44405.

Container imageDigestPackageFixed in
library/mysql:8.07dcddc01f13b
paramiko@4.0.0
no fix listed

Open the chart page →

20,190
pagesroccohiggins-pages1.0.01 of 3See more

pages roccohiggins-pages 1.0.0

1 of the 3 container images this version deploys carry CVE-2026-44405.

Container imageDigestPackageFixed in
library/mysql:8.07dcddc01f13b
paramiko@4.0.0
no fix listed

Open the chart page →

20,190
reviewboardrock8sVerified publisher0.0.11 of 3See more

reviewboard rock8s 0.0.1

1 of the 3 container images this version deploys carry CVE-2026-44405.

Container imageDigestPackageFixed in
beanbag/reviewboard:latest6b840f546e1c
paramiko@3.4.1
no fix listed

Open the chart page →

6,084
pagesronan-pages1.0.01 of 3See more

pages ronan-pages 1.0.0

1 of the 3 container images this version deploys carry CVE-2026-44405.

Container imageDigestPackageFixed in
library/mysql:8.07dcddc01f13b
paramiko@4.0.0
no fix listed

Open the chart page →

20,190
checkmkrtomik-helm-chartsVerified publisher0.1.01 of 1See more

checkmk rtomik-helm-charts 0.1.0

1 of the 1 container images this version deploys carry CVE-2026-44405.

Container imageDigestPackageFixed in
checkmk/check-mk-community:2.5.0p6c11b422210c4
paramiko@4.0.0
no fix listed

Open the chart page →

7,436
pagessamanvithkaranth1.0.01 of 3See more

pages samanvithkaranth 1.0.0

1 of the 3 container images this version deploys carry CVE-2026-44405.

Container imageDigestPackageFixed in
library/mysql:8.07dcddc01f13b
paramiko@4.0.0
no fix listed

Open the chart page →

20,190
pagessarubits-pages1.0.01 of 3See more

pages sarubits-pages 1.0.0

1 of the 3 container images this version deploys carry CVE-2026-44405.

Container imageDigestPackageFixed in
library/mysql:8.07dcddc01f13b
paramiko@4.0.0
no fix listed

Open the chart page →

20,190
airflowsb-helm-charts0.3.01 of 1See more

airflow sb-helm-charts 0.3.0

1 of the 1 container images this version deploys carry CVE-2026-44405.

Container imageDigestPackageFixed in
apache/airflow:2.8.1e5560ad0b86e
paramiko@3.4.0
no fix listed

Open the chart page →

10,209
mysqlsb-helm-charts0.4.01 of 1See more

mysql sb-helm-charts 0.4.0

1 of the 1 container images this version deploys carry CVE-2026-44405.

Container imageDigestPackageFixed in
library/mysql:8.4.3106d5197fd8e
paramiko@3.4.0
no fix listed

Open the chart page →

1,096
pgadminsb-helm-charts0.3.01 of 1See more

pgadmin sb-helm-charts 0.3.0

1 of the 1 container images this version deploys carry CVE-2026-44405.

Container imageDigestPackageFixed in
dpage/pgadmin4:8.13561c1f8f99f2
paramiko@3.5.0
no fix listed

Open the chart page →

1,713
secret-managersecret-managerVerified publisher1.0.01 of 4See more

secret-manager secret-manager 1.0.0

1 of the 4 container images this version deploys carry CVE-2026-44405.

Container imageDigestPackageFixed in
library/mysql:9.0.192dc86967801
paramiko@3.4.0
no fix listed

Open the chart page →

5,497
pagessekharpkube1.0.01 of 3See more

pages sekharpkube 1.0.0

1 of the 3 container images this version deploys carry CVE-2026-44405.

Container imageDigestPackageFixed in
library/mysql:8.07dcddc01f13b
paramiko@4.0.0
no fix listed

Open the chart page →

20,190
ansible-semaphoresergiotocaliniVerified publisher1.2.01 of 1See more

ansible-semaphore sergiotocalini 1.2.0

1 of the 1 container images this version deploys carry CVE-2026-44405.

Container imageDigestPackageFixed in
semaphoreui/semaphore:v2.9.645b50bc11833f
paramiko@3.1.0
no fix listed

Open the chart page →

3,337
pagesshrutiujlan-pages1.0.01 of 3See more

pages shrutiujlan-pages 1.0.0

1 of the 3 container images this version deploys carry CVE-2026-44405.

Container imageDigestPackageFixed in
library/mysql:8.07dcddc01f13b
paramiko@4.0.0
no fix listed

Open the chart page →

20,190
pgadminsikalabs0.1.01 of 2See more

pgadmin sikalabs 0.1.0

1 of the 2 container images this version deploys carry CVE-2026-44405.

Container imageDigestPackageFixed in
dpage/pgadmin4:latest2f4ce946ddf8
paramiko@3.5.1
no fix listed

Open the chart page →

398
sneakerssneakers1.0.01 of 4See more

sneakers sneakers 1.0.0

1 of the 4 container images this version deploys carry CVE-2026-44405.

Container imageDigestPackageFixed in
helga09/my_sql_shoes:v1.1.1a03657d97897
paramiko@2.11.0
no fix listed

Open the chart page →

7,574
spacecapybara-chartspacecapy1.0.491 of 2See more

spacecapybara-chart spacecapy 1.0.49

1 of the 2 container images this version deploys carry CVE-2026-44405.

Container imageDigestPackageFixed in
library/mysql:8.07dcddc01f13b
paramiko@4.0.0
no fix listed

Open the chart page →

11,888
pagessrinipages1.0.01 of 3See more

pages srinipages 1.0.0

1 of the 3 container images this version deploys carry CVE-2026-44405.

Container imageDigestPackageFixed in
library/mysql:8.07dcddc01f13b
paramiko@4.0.0
no fix listed

Open the chart page →

20,190
pgadminstakaterVerified publisher0.1.141 of 1See more

pgadmin stakater 0.1.14

1 of the 1 container images this version deploys carry CVE-2026-44405.

Container imageDigestPackageFixed in
dpage/pgadmin4:4.5a5a656e1d5fd
paramiko@2.4.2
no fix listed

Open the chart page →

2,060
pagesstephendillondell1.0.01 of 3See more

pages stephendillondell 1.0.0

1 of the 3 container images this version deploys carry CVE-2026-44405.

Container imageDigestPackageFixed in
library/mysql:8.07dcddc01f13b
paramiko@4.0.0
no fix listed

Open the chart page →

20,190
pagessunilb2590-pages1.0.01 of 3See more

pages sunilb2590-pages 1.0.0

1 of the 3 container images this version deploys carry CVE-2026-44405.

Container imageDigestPackageFixed in
library/mysql:8.07dcddc01f13b
paramiko@4.0.0
no fix listed

Open the chart page →

20,190
freeradiussvtech-public-helm-charts0.1.51 of 4See more

freeradius svtech-public-helm-charts 0.1.5

1 of the 4 container images this version deploys carry CVE-2026-44405.

Container imageDigestPackageFixed in
library/mysql:8.2.0212fe73edca5
paramiko@2.11.0
no fix listed

Open the chart page →

12,655
icinga2svtech-public-helm-charts1.0.01 of 4See more

icinga2 svtech-public-helm-charts 1.0.0

1 of the 4 container images this version deploys carry CVE-2026-44405.

Container imageDigestPackageFixed in
svtechnmaa/svtech_icinga2:v1.1.667be2aba9436
paramiko@3.4.0
no fix listed

Open the chart page →

5,511
maxscalesvtech-public-helm-charts1.0.01 of 2See more

maxscale svtech-public-helm-charts 1.0.0

1 of the 2 container images this version deploys carry CVE-2026-44405.

Container imageDigestPackageFixed in
library/mysql:8.2.0212fe73edca5
paramiko@2.11.0
no fix listed

Open the chart page →

5,841
rundecksvtech-public-helm-charts1.0.01 of 2See more

rundeck svtech-public-helm-charts 1.0.0

1 of the 2 container images this version deploys carry CVE-2026-44405.

Container imageDigestPackageFixed in
svtechnmaa/svtech_rundeck:v1.2.26e368ace0977
paramiko@2.11.0
no fix listed

Open the chart page →

18,756
agentssynapse0.1.301 of 9See more

agents synapse 0.1.30

1 of the 9 container images this version deploys carry CVE-2026-44405.

Container imageDigestPackageFixed in
mysql/mysql-server:latestd6c8301b7834
paramiko@2.11.0
no fix listed

Open the chart page →

7,244
scribesynapse0.2.161 of 7See more

scribe synapse 0.2.16

1 of the 7 container images this version deploys carry CVE-2026-44405.

Container imageDigestPackageFixed in
mysql/mysql-server:latestd6c8301b7834
paramiko@2.11.0
no fix listed

Open the chart page →

2,680
sinnersynapse0.1.01 of 6See more

sinner synapse 0.1.0

1 of the 6 container images this version deploys carry CVE-2026-44405.

Container imageDigestPackageFixed in
mysql/mysql-server:latestd6c8301b7834
paramiko@2.11.0
no fix listed

Open the chart page →

1,955
tensor_apptensor-app0.2.21 of 3See more

tensor_app tensor-app 0.2.2

1 of the 3 container images this version deploys carry CVE-2026-44405.

Container imageDigestPackageFixed in
library/mysql:5.74bc6bc963e6d
paramiko@2.11.0
no fix listed

Open the chart page →

17,461
pagestest43221.0.01 of 3See more

pages test4322 1.0.0

1 of the 3 container images this version deploys carry CVE-2026-44405.

Container imageDigestPackageFixed in
library/mysql:8.07dcddc01f13b
paramiko@4.0.0
no fix listed

Open the chart page →

20,190
flask-contactstest-configmap1.0.11 of 3See more

flask-contacts test-configmap 1.0.1

1 of the 3 container images this version deploys carry CVE-2026-44405.

Container imageDigestPackageFixed in
library/mysql:8.07dcddc01f13b
paramiko@4.0.0
no fix listed

Open the chart page →

5,704
pagesthiru-pages1.0.01 of 3See more

pages thiru-pages 1.0.0

1 of the 3 container images this version deploys carry CVE-2026-44405.

Container imageDigestPackageFixed in
library/mysql:8.07dcddc01f13b
paramiko@4.0.0
no fix listed

Open the chart page →

20,190
pagesthuy-pages1.0.01 of 3See more

pages thuy-pages 1.0.0

1 of the 3 container images this version deploys carry CVE-2026-44405.

Container imageDigestPackageFixed in
library/mysql:8.07dcddc01f13b
paramiko@4.0.0
no fix listed

Open the chart page →

20,190

Container images carrying it

134 by charts deploying them

A fixed version is listed for 0 of the 2 affected packages.

Container imageDigestPackageFixed inUsed by
library/mysql:8.07dcddc01f13b
paramiko@4.0.0
no fix listed
89
library/mysql:5.74bc6bc963e6d
paramiko@2.11.0
no fix listed
22
library/mysql:8:8.4:8.4.11b3b90af2a655
paramiko@4.0.0
no fix listed
16
library/mysql:9.7.2257388edf9c8
paramiko@4.0.0
no fix listed
6
dpage/pgadmin4:9.17:latest2f4ce946ddf8
paramiko@3.5.1
no fix listed
5
apache/superset:6.1.0:latest16b50bbef664
paramiko@3.5.1
no fix listed
3
cloudve/cloudlaunch-server:latest4a3d7fae90bb
paramiko@2.8.0
no fix listed
3
dpage/pgadmin4:6.12781369df9994
paramiko@2.11.0
no fix listed
3
mysql/mysql-server:latestd6c8301b7834
paramiko@2.11.0
no fix listed
3
confluentinc/cp-kafka:6.2.11-1-ubi8ac776fad95a5
paramiko@2.12.0
no fix listed
2
confluentinc/cp-zookeeper:6.2.11-1-ubi8cae577096489
paramiko@2.12.0
no fix listed
2
library/mysql:8.2.0212fe73edca5
paramiko@2.11.0
no fix listed
2
library/mysql:8.4.2ac80b6e09e5b
paramiko@3.4.0
no fix listed
2
library/mysql:9.7.2b2cf29815e62
paramiko@4.0.0
no fix listed
2
omecproject/mcord-synchronizer:comac-1.0.0cfdb566dd949
paramiko@2.4.2
no fix listed
2
ghcr.io/home-assistant/home-assistant:2026.9.1:latest612d76760b54
paramiko@3.5.0
no fix listed
2
ghcr.io/home-assistant/home-assistant:2026.9.2a1bc133af84e
paramiko@3.5.0
no fix listed
2
abhinavsingh/proxy.py:latest51adc989fd03
paramiko@3.4.0
no fix listed
1
amd64/mysql:5.7e20a653e0f51
paramiko@2.11.0
no fix listed
1
ansiblesemaphore/semaphore:v2.8.5303d1f8684027
paramiko@2.7.2
no fix listed
1
apache/airflow:2.8.4-python3.964e58748b6b9
paramiko@3.4.0
no fix listed
1
apache/airflow:2.10.2-python3.9ce90bdc3d2af
paramiko@3.5.0
no fix listed
1
apache/airflow:2.8.1e5560ad0b86e
paramiko@3.4.0
no fix listed
1
apache/superset:4.0.1ab9467fd712c
paramiko@3.4.0
no fix listed
1
assistiot/authorization_db:latestc3adbab6a3e7
paramiko@2.11.0
no fix listed
1
beanbag/reviewboard:latest6b840f546e1c
paramiko@3.4.1
no fix listed
1
berkeleyskypilot/skypilot:0.13.03bc8bf8f4d83
paramiko@3.5.1
no fix listed
1
berkeleyskypilot/skypilot-nightly:latest8da2f3cda472
paramiko@3.5.1
no fix listed
1
camptocamp/ekorre:0.1.035c91d5fda04
paramiko@2.7.1
no fix listed
1
cccs/assemblyline-core:4.7.4.stable177c3c25d4d6e0
paramiko@3.5.1
no fix listed
1
cccs/assemblyline-socketio:4.7.4.stable1724646dbfd944
paramiko@3.5.1
no fix listed
1
cccs/assemblyline-ui:4.7.4.stable171a7a103668f5
paramiko@3.5.1
no fix listed
1
checkmk/check-mk-community:2.5.0p6c11b422210c4
paramiko@4.0.0
no fix listed
1
chorss/docker-pgadmin4:4.115c549cacb8ab
paramiko@2.6.0
no fix listed
1
confluentinc/cp-enterprise-control-center:6.1.0f2975d507a2a
paramiko@2.4.2
no fix listed
1
confluentinc/cp-enterprise-kafka:6.1.08f1544df1f48
paramiko@2.4.2
no fix listed
1
confluentinc/cp-kafka:7.1.2.amd643bf359d5e340
paramiko@2.11.0
no fix listed
1
confluentinc/cp-kafka:7.4.4c0224a1adf7a
paramiko@2.12.0
no fix listed
1
confluentinc/cp-kafka:7.5.1dc9b972db002
paramiko@2.12.0
no fix listed
1
confluentinc/cp-kafka-connect:6.1.04bc70a83ca6f
paramiko@2.4.2
no fix listed
1
confluentinc/cp-kafka-rest:6.1.0b0b7aa26254a
paramiko@2.4.2
no fix listed
1
confluentinc/cp-ksqldb-server:7.6.08ec46c27982f
paramiko@3.4.0
no fix listed
1
confluentinc/cp-ksqldb-server:6.1.0ee403d5b9090
paramiko@2.4.2
no fix listed
1
confluentinc/cp-schema-registry:6.1.0b651d4b6185a
paramiko@2.4.2
no fix listed
1
confluentinc/cp-zookeeper:7.5.10bec03c1f3ce
paramiko@2.12.0
no fix listed
1
confluentinc/cp-zookeeper:6.1.078c190f4472c
paramiko@2.4.2
no fix listed
1
dannielkil/book-db:latest433290c5c1db
paramiko@3.4.0
no fix listed
1
datadog/agent:7.22.08f20e56b5311
paramiko@2.6.0
no fix listed
1
datadog/agent:6aad9994de6a7
paramiko@2.12.0
no fix listed
1
deepflowce/mysql:8.0.313d7ae561cf60
paramiko@2.11.0
no fix listed
1

syft 1.42.1 · advisories as of 14 Sept 2026

Corrections: contact@stackradar.io

Catalogue: Artifact Hub · Advisories: OSV · Exploitation: FIRST EPSS, CISA KEV.