ZÉROJOUR

The zero-day paper — printed from structured content, not scraped prose.
Permanent editionPublic dataset · Sanity GROQGHSA × CISA KEV
No remedy · paramiko (pip) · published 2026-05-06

Paramiko rsakey.py allows the SHA-1 algorithm

CVE-2026-44405 — CVSS 3.4/10. No fix has been published yet.
Package
paramiko
Ecosystem
pip
Vector
ADJACENT_NETWORK
Complexity
HIGH
Privileges
NONE
Interaction
NONE
Scope
CHANGED
Confidentiality
NONE
Integrity
LOW
Availability
NONE

In Paramiko through 4.0.0 before a448945, rsakey.py allows the SHA-1 algorithm.

Weakness classes: CWE-327 (Use of a Broken or Risky Cryptographic Algorithm)

Source: GHSA-r374-rxx8-8654 · GitHub Advisory Database (CC-BY-4.0) — printed from a structured Sanity dataset. ← Back to the front page

ZéroJour prints itself from a Sanity dataset of real advisories (GitHub Advisory Database, CC-BY-4.0; CISA KEV). No scraping, no keyword search — headlines are typed fields, scores are numbers, fixes are versions. The newsroom composes, a human approves.