CVE-2026-38974 | Dulwich up to 1.1.0 paramiko_vendor.py Remote Code Execution

July 16, 2026 Yanac

A vulnerability was found in Dulwich up to 1.1.0. It has been classified as critical. This affects an unknown part of the file contrib/paramiko_vendor.py. This manipulation causes Remote Code Execution.

This vulnerability is tracked as CVE-2026-38974. The attack is possible to be carried out remotely. No exploit exists.VulDB Recent EntriesRead More