{"action":"Upgrade binwalk to 2.3.3 or later.","affected":[{"fixed":"2.3.3","introduced":"0"}],"component":"binwalk","cve_ids":["CVE-2021-4287"],"ecosystem":"PyPI","epss":0.02145,"exploited":false,"fixed_versions":["2.3.3"],"ghsa_id":"GHSA-8m3f-g62j-3vx8","id":"tcs_01M5KF8H3MY0KGWB3BP97X6HCQ","modified_at":"2026-07-07T11:56:32.774933377Z","published_at":"2022-12-27T12:30:19Z","references":["https://osv.dev/vulnerability/GHSA-8m3f-g62j-3vx8","https://nvd.nist.gov/vuln/detail/CVE-2021-4287","https://github.com/ReFirmLabs/binwalk/pull/556","https://github.com/ReFirmLabs/binwalk/commit/fa0c0bd59b8588814756942fe4cb5452e76c1dcd","https://github.com/ReFirmLabs/binwalk","https://github.com/ReFirmLabs/binwalk/releases/tag/v2.3.3","https://vuldb.com/?ctiid.216876","https://vuldb.com/?id.216876"],"severity":{"label":"medium","score":6.5},"sources":[{"source":"osv","source_id":"GHSA-8m3f-g62j-3vx8","url":"https://osv.dev/vulnerability/GHSA-8m3f-g62j-3vx8"}],"summary":"binwalk vulnerable to UNIX Symbolic Link (Symlink) Following"}