From ede2a977706a320a3aac0aca22caa9f94e5e5ea4 Mon Sep 17 00:00:00 2001
From: Christian Manivong <christian.manivong@gmail.com>
Date: Thu, 2 Jul 2026 12:22:55 +0200
Subject: [PATCH] fix(deps): pin paramiko>=5.0.0 (CVE-2026-44405)

---
 pyproject.toml | 1 +
 1 file changed, 1 insertion(+)

diff --git a/pyproject.toml b/pyproject.toml
index d048846..65beae4 100644
--- a/pyproject.toml
+++ b/pyproject.toml
@@ -26,6 +26,7 @@ requires-python = ">=3.9"
 dependencies = [
     "napalm>=5.0.0",
     "napalm_device_types>=0.1.0",
+    "paramiko>=5.0.0",  # CVE-2026-44405; imported directly for SSH fallback (driver.py)
     "proxmoxer>=2.0.0",
     "netaddr>=0.9.0",
     "requests>=2.31.0",