{"action":"Upgrade paramiko to 1.17.6 or later.","affected":[{"fixed":"1.17.6","introduced":"0"},{"fixed":"1.18.5","introduced":"1.18.0"},{"fixed":"2.0.8","introduced":"2.0.0"},{"fixed":"2.1.5","introduced":"2.1.0"},{"fixed":"2.2.3","introduced":"2.2.0"},{"fixed":"2.3.2","introduced":"2.3.0"}],"component":"paramiko","cve_ids":["CVE-2018-7750"],"ecosystem":"PyPI","epss":0.27105,"exploited":false,"fixed_versions":["1.17.6","1.18.5","2.0.8","2.1.5","2.2.3","2.3.2"],"ghsa_id":"GHSA-232r-66cg-79px","id":"tcs_01M5KG7V4801FG36T2SHAXP2WJ","modified_at":"2026-06-08T11:15:07.478696416Z","published_at":"2018-03-13T18:29:00Z","references":["https://osv.dev/vulnerability/PYSEC-2018-19","https://github.com/paramiko/paramiko/commit/fa29bd8446c8eab237f5187d28787727b4610516","https://github.com/paramiko/paramiko/blob/master/sites/www/changelog.rst","https://github.com/paramiko/paramiko/issues/1175","https://usn.ubuntu.com/3603-2/","https://access.redhat.com/errata/RHSA-2018:0591","https://usn.ubuntu.com/3603-1/","https://access.redhat.com/errata/RHSA-2018:0646","https://access.redhat.com/errata/RHSA-2018:1125","https://access.redhat.com/errata/RHSA-2018:1124","https://access.redhat.com/errata/RHSA-2018:1213","http://www.securityfocus.com/bid/103713","https://access.redhat.com/errata/RHSA-2018:1274","https://access.redhat.com/errata/RHSA-2018:1328","https://access.redhat.com/errata/RHSA-2018:1525","https://access.redhat.com/errata/RHSA-2018:1972","https://lists.debian.org/debian-lts-announce/2018/10/msg00018.html","https://www.exploit-db.com/exploits/45712/","https://github.com/advisories/GHSA-232r-66cg-79px"],"severity":{"label":"unknown"},"sources":[{"source":"osv","source_id":"PYSEC-2018-19","url":"https://osv.dev/vulnerability/PYSEC-2018-19"}],"summary":"transport.py in the SSH server implementation of Paramiko before 1.17.6, 1.18.x before 1.18.5, 2.0.x before 2.0.8, 2.1.x before 2.1.5, 2.2.x before 2.2.3, 2.3.x before 2.3.2, and 2.4.x before 2.4.1 do"}