GHSA-h7fr-r783-5g99

Опубликовано: 16 июл. 2026

Источник: github

Github: Не прошло ревью

CVSS3: 5.3

Описание

Dulwich through 1.1.0 was found to be missing SSH host key verification in contrib/paramiko_vendor.py.

Ссылки

EPSS

Процентиль: 9%

0.00195

Низкий

5.3 Medium

CVSS3

CVE ID

CVE-2026-38974

Дефекты

CWE-295

Связанные уязвимости

CVE-2026-38974

CVSS3: 5.3

ubuntu

27 дней назад

Dulwich through 1.1.0 was found to be missing SSH host key verification in contrib/paramiko_vendor.py.

CVE-2026-38974

CVSS3: 8.8

redhat

28 дней назад

Dulwich through 1.1.0 was found to be missing SSH host key verification in contrib/paramiko_vendor.py.

CVE-2026-38974

CVSS3: 5.3

nvd

27 дней назад

Dulwich through 1.1.0 was found to be missing SSH host key verification in contrib/paramiko_vendor.py.

CVE-2026-38974

CVSS3: 5.3

debian

27 дней назад

Dulwich through 1.1.0 was found to be missing SSH host key verificatio ...

SUSE-SU-2026:3459-1

suse-cvrf

8 дней назад

Security update for python3-dulwich

EPSS

Процентиль: 9%

0.00195

Низкий

5.3 Medium

CVSS3

CVE ID

CVE-2026-38974

Дефекты

CWE-295