Search for packages
Package details: pkg:pypi/paramiko@1.7.1.post2
purl pkg:pypi/paramiko@1.7.1.post2
Tags Ghost
Next non-vulnerable version 3.4.0
Latest non-vulnerable version 3.4.0
Risk 4.0
Vulnerabilities affecting this package (1)
Vulnerability Summary Fixed by
VCID-ndkx-zuac-aaab
Aliases:
CVE-2008-0299
GHSA-wqmm-q65g-2hqr
PYSEC-2008-8
common.py in Paramiko 1.7.1 and earlier, when using threads or forked processes, does not properly use RandomPool, which allows one session to obtain sensitive information from another session by predicting the state of the pool.
1.7.1.post3
Affected by 0 other vulnerabilities.
1.7.2
Affected by 4 other vulnerabilities.
Vulnerabilities fixed by this package (0)
Vulnerability Summary Aliases
This package is not known to fix vulnerabilities.

Date Actor Action Vulnerability Source VulnerableCode Version
2024-10-08T21:59:32.438473+00:00 GHSA Importer Affected by VCID-ndkx-zuac-aaab https://github.com/advisories/GHSA-wqmm-q65g-2hqr 34.0.2
2024-09-17T22:26:31.619234+00:00 GitLab Importer Affected by VCID-ndkx-zuac-aaab https://gitlab.com/gitlab-org/advisories-community/-/blob/main/pypi/paramiko/CVE-2008-0299.yml 34.0.1
2024-09-17T22:13:20.972287+00:00 GHSA Importer Affected by VCID-ndkx-zuac-aaab https://github.com/advisories/GHSA-wqmm-q65g-2hqr 34.0.1
2024-02-13T15:59:39.050069+00:00 GitLab Importer Affected by VCID-ndkx-zuac-aaab https://gitlab.com/gitlab-org/advisories-community/-/blob/main/pypi/paramiko/CVE-2008-0299.yml 34.0.0rc2
2024-02-09T20:11:09.747006+00:00 GHSA Importer Affected by VCID-ndkx-zuac-aaab https://github.com/advisories/GHSA-wqmm-q65g-2hqr 34.0.0rc2