{"action":"Upgrade pyftpdlib to 0.1.1 or later.","affected":[{"fixed":"0.1.1","introduced":"0"}],"component":"pyftpdlib","cve_ids":["CVE-2007-6738"],"ecosystem":"PyPI","epss":0.01127,"exploited":false,"fixed_versions":["0.1.1"],"ghsa_id":"GHSA-gh7c-cg3x-pmcr","id":"tcs_01M5KFHNWR08NB51GD2HA58VGZ","modified_at":"2024-10-21T21:00:56Z","published_at":"2022-05-01T18:45:57Z","references":["https://osv.dev/vulnerability/GHSA-gh7c-cg3x-pmcr","https://nvd.nist.gov/vuln/detail/CVE-2007-6738","https://github.com/giampaolo/pyftpdlib/commit/d171bdc4ef7ac769671946a8a3e5eaafc39a9202","https://github.com/giampaolo/pyftpdlib","https://github.com/pypa/advisory-database/tree/main/vulns/pyftpdlib/PYSEC-2010-22.yaml","http://code.google.com/p/pyftpdlib/source/browse/trunk/HISTORY"],"severity":{"label":"high","score":7.5},"sources":[{"source":"osv","source_id":"GHSA-gh7c-cg3x-pmcr","url":"https://osv.dev/vulnerability/GHSA-gh7c-cg3x-pmcr"}],"summary":"pyftpdlib Use of Insufficiently Random Values of port selection on PASV command"}