CVE-2026-38974

Опубликовано: 15 июл. 2026

Источник: debian

EPSS Низкий

Описание

Dulwich through 1.1.0 was found to be missing SSH host key verification in contrib/paramiko_vendor.py.

Пакет	Статус	Версия исправления	Релиз	Тип
dulwich	fixed	1.2.0-1		package

https://github.com/jelmer/dulwich/pull/2123
https://github.com/jelmer/dulwich/commit/02c65a0c03b81619b63598154e1ce5cddc9d85cd (dulwich-1.2.0)
https://github.com/jelmer/dulwich/commit/5bbe6de77ef902cce779b96942b74f81cfc0dacd (dulwich-1.2.0)

EPSS

Процентиль: 9%

0.00195

Низкий

CVE-2026-38974

CVSS3: 5.3

ubuntu

27 дней назад

Dulwich through 1.1.0 was found to be missing SSH host key verification in contrib/paramiko_vendor.py.

CVE-2026-38974

CVSS3: 8.8

redhat

28 дней назад

Dulwich through 1.1.0 was found to be missing SSH host key verification in contrib/paramiko_vendor.py.

CVE-2026-38974

CVSS3: 5.3

nvd

27 дней назад

Dulwich through 1.1.0 was found to be missing SSH host key verification in contrib/paramiko_vendor.py.

SUSE-SU-2026:3459-1

suse-cvrf

8 дней назад

Security update for python3-dulwich

SUSE-SU-2026:3408-1

suse-cvrf

13 дней назад

Security update for python-dulwich

EPSS

Процентиль: 9%

0.00195

Низкий