{"action":"Upgrade paramiko to 1.17.6 or later.","affected":[{"fixed":"2.0.8","introduced":"2.0.0"},{"fixed":"2.1.5","introduced":"2.1.0"},{"fixed":"2.2.3","introduced":"2.2.0"},{"fixed":"2.3.2","introduced":"2.3.0"},{"fixed":"2.4.1","introduced":"2.4.0"},{"fixed":"1.18.5","introduced":"1.18.0"},{"fixed":"1.17.6","introduced":"0"}],"component":"paramiko","cve_ids":["CVE-2018-7750"],"ecosystem":"PyPI","epss":0.27105,"exploited":false,"fixed_versions":["2.0.8","2.1.5","2.2.3","2.3.2","2.4.1","1.18.5","1.17.6"],"ghsa_id":"GHSA-232r-66cg-79px","id":"tcs_01M5KERJY5SXC4JKS2NAMGF6TS","modified_at":"2026-06-09T13:15:16.170803623Z","published_at":"2018-07-12T20:29:30Z","references":["https://osv.dev/vulnerability/GHSA-232r-66cg-79px","https://nvd.nist.gov/vuln/detail/CVE-2018-7750","https://github.com/paramiko/paramiko/issues/1175","https://github.com/paramiko/paramiko/commit/fa29bd8446c8eab237f5187d28787727b4610516","https://github.com/paramiko/paramiko/commit/e9dfd854bdaf8af15d7834f7502a0451d217bb8c","https://www.exploit-db.com/exploits/45712","https://web.archive.org/web/20190831123128/http://www.securityfocus.com/bid/103713","https://usn.ubuntu.com/3603-2","https://usn.ubuntu.com/3603-1","https://lists.debian.org/debian-lts-announce/2021/12/msg00025.html","https://lists.debian.org/debian-lts-announce/2018/10/msg00018.html","https://github.com/pypa/advisory-database/tree/main/vulns/paramiko/PYSEC-2018-19.yaml","https://github.com/paramiko/paramiko/blob/master/sites/www/changelog.rst","https://github.com/paramiko/paramiko/blob/e861c7697622774071ce73b46ffe8817eacdedfa/sites/www/changelog.rst?plain=1#L759-L763","https://github.com/paramiko/paramiko","https://github.com/advisories/GHSA-232r-66cg-79px","https://access.redhat.com/errata/RHSA-2018:1972","https://access.redhat.com/errata/RHSA-2018:1525","https://access.redhat.com/errata/RHSA-2018:1328","https://access.redhat.com/errata/RHSA-2018:1274","https://access.redhat.com/errata/RHSA-2018:1213","https://access.redhat.com/errata/RHSA-2018:1125","https://access.redhat.com/errata/RHSA-2018:1124","https://access.redhat.com/errata/RHSA-2018:0646","https://access.redhat.com/errata/RHSA-2018:0591","http://www.securityfocus.com/bid/103713"],"severity":{"label":"critical","score":9.8},"sources":[{"source":"osv","source_id":"GHSA-232r-66cg-79px","url":"https://osv.dev/vulnerability/GHSA-232r-66cg-79px"}],"summary":"Paramiko not properly checking authentication before processing other requests"}