From 6e7cab3fecfa80475f102e196205ba755094a0e6 Mon Sep 17 00:00:00 2001 From: YueGuobin Date: Tue, 19 May 2026 00:07:18 +0800 Subject: [PATCH] fix: update netmiko to 4.7.0 and pin paramiko>=5.0.0 to fix CVE-2026-44405 CVE-2026-44405 allows SHA-1 signature algorithm in paramiko through 4.0.0. netmiko 4.7.0 still permits paramiko<5.0, so pip resolves to the vulnerable 4.0.0. Explicitly pinning paramiko>=5.0.0 ensures the fix commit a448945 is included. Co-Authored-By: Claude Opus 4.7 --- ai-requirements.txt | 3 ++- 1 file changed, 2 insertions(+), 1 deletion(-) diff --git a/ai-requirements.txt b/ai-requirements.txt index 81cfccf2b..2db0de884 100644 --- a/ai-requirements.txt +++ b/ai-requirements.txt @@ -30,7 +30,8 @@ tiktoken>=0.8.0 langsmith>=0.7.7 # Network Automation -netmiko>=4.6.0 +netmiko>=4.7.0 +paramiko>=5.0.0 nornir>=3.5.0 nornir-netmiko>=1.0.1 nornir-utils>=0.2.0