NgTech-LTD/gns3-server
2
0
Fork 0
mirror of https://github.com/GNS3/gns3-server.git synced 2026-08-27 20:40:13 +03:00
Code Issues Packages Projects Releases Wiki Activity

fix: update netmiko to 4.7.0 and pin paramiko>=5.0.0 to fix CVE-2026-44405

Browse Source 
CVE-2026-44405 allows SHA-1 signature algorithm in paramiko through
4.0.0. netmiko 4.7.0 still permits paramiko<5.0, so pip resolves to
the vulnerable 4.0.0. Explicitly pinning paramiko>=5.0.0 ensures the
fix commit a448945 is included.

Co-Authored-By: Claude Opus 4.7 <noreply@anthropic.com>
This commit is contained in:
YueGuobin 2026-05-19 00:07:18 +08:00
parent c71dfbb6b5
commit 6e7cab3fec
No known key found for this signature in database
1 changed files with 2 additions and 1 deletions
Show Stats Download Patch File Download Diff File Expand all files Collapse all files

3
ai-requirements.txt
View File

@ -30,7 +30,8 @@ tiktoken>=0.8.0
langsmith>=0.7.7
# Network Automation
netmiko>=4.6.0
netmiko>=4.7.0
paramiko>=5.0.0
nornir>=3.5.0
nornir-netmiko>=1.0.1
nornir-utils>=0.2.0