VULNERABILITY INTELLIGENCE

CVE-2026-38974

CVSS score5.3 MEDIUM

EPSS probability0.33%

CISA KEVNot currently listed

Published2026-07-15

Last modified2026-07-16

CVSS vectorCVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N

Description

Dulwich through 1.1.0 was found to be missing SSH host key verification in contrib/paramiko_vendor.py.