tocsin

PyPI/paramiko CVE-2018-7750: critical 9.8, EPSS 27.11%

Paramiko not properly checking authentication before processing other requests

Action: Upgrade paramiko to 1.17.6 or later.

pip install paramiko==2.0.8
pip install paramiko==2.1.5
pip install paramiko==2.2.3
pip install paramiko==2.3.2
pip install paramiko==2.4.1
pip install paramiko==1.18.5
pip install paramiko==1.17.6

Affected

introducedfixedlast affected
2.0.02.0.8-
2.1.02.1.5-
2.2.02.2.3-
2.3.02.3.2-
2.4.02.4.1-
1.18.01.18.5-
01.17.6-

Fixed versions

2.0.82.1.52.2.32.3.22.4.11.18.51.17.6

Sources

CVE-2018-7750 · published · modified · JSON