From 5f332ad6d78a833c9432b265f22abd49b9254d44 Mon Sep 17 00:00:00 2001 From: "dependabot[bot]" <49699333+dependabot[bot]@users.noreply.github.com> Date: Tue, 16 Dec 2025 23:04:33 +0000 Subject: [PATCH] deps(vulnshop): bump paramiko from 2.4.0 to 4.0.0 in /vulnerable-app Bumps [paramiko](https://github.com/paramiko/paramiko) from 2.4.0 to 4.0.0. - [Commits](https://github.com/paramiko/paramiko/compare/2.4.0...4.0.0) --- updated-dependencies: - dependency-name: paramiko dependency-version: 4.0.0 dependency-type: direct:production update-type: version-update:semver-major ... Signed-off-by: dependabot[bot] --- vulnerable-app/requirements.txt | 2 +- 1 file changed, 1 insertion(+), 1 deletion(-) diff --git a/vulnerable-app/requirements.txt b/vulnerable-app/requirements.txt index 2a4d9ce..0e017f2 100644 --- a/vulnerable-app/requirements.txt +++ b/vulnerable-app/requirements.txt @@ -86,7 +86,7 @@ defusedxml>=0.7.0 # ----------------------------------------------------------------------------- # paramiko 2.4.0 has: # - CVE-2018-1000805 (Authentication Bypass) -paramiko==2.4.0 +paramiko==4.0.0 # ----------------------------------------------------------------------------- # Other Utilities