{"action":"Upgrade mailman to 3.3.5 or later.","affected":[{"fixed":"3.3.5","introduced":"0"}],"component":"mailman","cve_ids":["CVE-2021-34337"],"ecosystem":"PyPI","epss":0.00302,"exploited":false,"fixed_versions":["3.3.5"],"ghsa_id":"GHSA-2jg5-xgvv-4wq7","id":"tcs_01M5KESR088M3FJX0SVTDM20RZ","modified_at":"2026-02-22T22:56:10.942103Z","published_at":"2023-04-15T21:30:16Z","references":["https://osv.dev/vulnerability/GHSA-2jg5-xgvv-4wq7","https://nvd.nist.gov/vuln/detail/CVE-2021-34337","https://github.com/pypa/advisory-database/tree/main/vulns/mailman/PYSEC-2023-22.yaml","https://gitlab.com/mailman/mailman","https://gitlab.com/mailman/mailman/-/commit/e4a39488c4510fcad8851217f10e7337a196bb51","https://gitlab.com/mailman/mailman/-/issues/911","https://gitlab.com/mailman/mailman/-/tags"],"severity":{"label":"medium","score":6.3},"sources":[{"source":"osv","source_id":"GHSA-2jg5-xgvv-4wq7","url":"https://osv.dev/vulnerability/GHSA-2jg5-xgvv-4wq7"}],"summary":"Mailman Core vulnerable to timing attacks"}