In Paramiko before 2.10.1, a race condition (between creation and chmod) in the writeprivatekey_file function could allow unauthorized information disclosure.
{ "affected_functions": [ "paramiko.pkey.PKey._write_private_key_file" ] }