Issues

• [BUG] - BufferedFile.read() re-slices the full buffer on every call, causing quadratic cost with small chunk sizes

  Bug
  paramiko/paramiko#2688 · Filter by author eGkritsis opened on Sep 10, 2026

• [BUG] - exec_command can deadlock transport when its ChannelStdinFile is garbage collected at the wrong time

  Bug
  paramiko/paramiko#2685 · Filter by author squah-confluent opened on Sep 6, 2026

• [FEAT] - <Release timeline for PQC support>

  Feature
  paramiko/paramiko#2684 · Filter by author raviranjan042 opened on Sep 3, 2026

• [Security] MEDIUM: Weak algorithms in default config; LOW: Timing attack in key padding; LOW: Password plaintext exposure

  paramiko/paramiko#2672 · Filter by author Nothern131 opened on Aug 16, 2026

• [BUG] - O(n²) behavior in Channel.sendall() with tiny remote flow-control windows

  Bug
  paramiko/paramiko#2659 · Filter by author pontusj101 opened on Jul 21, 2026

• [FEAT] - make BufferedFile io compatible

  Feature
  paramiko/paramiko#2658 · Filter by author asmodehn opened on Jul 20, 2026

• [SUPPORT] - <title>

  Support
  paramiko/paramiko#2643 · Filter by author mitchjs opened on Jul 10, 2026

• [BUG] - Configuration under Match statements with invalid or unknown Match criteria words is

  Bug
  paramiko/paramiko#2632 · Filter by author kre9 opened on Jun 12, 2026

• [BUG] - RSAKey sign_ssh_data raises KeyError: 'ssh-rsa' with default algorithm

  Bug
  paramiko/paramiko#2628 · Filter by author ultraplanet opened on May 31, 2026

• [SUPPORT] - Paramiko + sudo-1.9.17p2 + stdin input for sudo -S does not work as expected

  Support
  paramiko/paramiko#2627 · Filter by author ArthurGarnier opened on May 26, 2026

• Missing MAX_PACKET_SIZE check in BPP layer allows memory exhaustion from malicious server

  paramiko/paramiko#2626 · Filter by author igorg1312 opened on May 21, 2026

• Use Trusted Publishing to upload to PyPI

  paramiko/paramiko#2625 · Filter by author nsoranzo opened on May 19, 2026
  1

• [BUG] - document that password-/passphrase-parameter of paramiko.client.SSHClient.connect also accept bytes

  Bug
  paramiko/paramiko#2602 · Filter by author calestyo opened on May 6, 2026

• [BUG] - after connection loss, first "re-connection" fails with

  Bug
  paramiko/paramiko#2601 · Filter by author calestyo opened on May 1, 2026
  1

• [BUG] - AttributeError when calling .exec_command() on a SSHClient which hasn't been .connect()ed yet

  Bug
  paramiko/paramiko#2600 · Filter by author calestyo opened on May 1, 2026

• [BUG] - SSH exec_command gets stuck while waiting for threading Event

  Bug
  paramiko/paramiko#2599 · Filter by author shubhanshu02 opened on Apr 29, 2026

• GHSA-f8q4-jwww-x3wv: claimed fixed version 2.9.3 still ships pre-fix code

  paramiko/paramiko#2596 · Filter by author DEVSOG12 opened on Apr 21, 2026

• Post-quantum cryptography audit — RSA/ECC/SHA-1 usages flagged by NIST migration guidance

  paramiko/paramiko#2594 · Filter by author maddykws opened on Apr 18, 2026
  2

• Bug: Host key comparison uses non-constant-time == instead of constant_time_bytes_eq

  paramiko/paramiko#2585 · Filter by author themavik opened on Mar 19, 2026

• [Support] - Some default ciphers kex and macs are passed to server on using sshconfig

  Support
  paramiko/paramiko#2579 · Filter by author somashekarv opened on Mar 5, 2026

• [SUPPORT] - safe to use send_user_message ?

  Support
  paramiko/paramiko#2573 · Filter by author tgarc opened on Feb 19, 2026
  1

• [BUG] wrong documentation on how known hosts are merged

  Bug
  paramiko/paramiko#2572 · Filter by author calestyo opened on Feb 18, 2026
  2

• ProxyCommand.close() leaks file descriptors — does not close subprocess pipes or wait for process exit

  paramiko/paramiko#2568 · Filter by author rnetser opened on Feb 13, 2026

• [BUG] - test suite hitting thread limit on armhf

  Bug
  paramiko/paramiko#2567 · Filter by author simpoir opened on Feb 13, 2026

• [BUG][PACKAGING] License metadata using deprecated SPDX identifier

  paramiko/paramiko#2563 · Filter by author penguinolog opened on Jan 29, 2026