{"action":"Upgrade pyftpdlib to 0.1.1 or later.","affected":[{"fixed":"0.1.1","introduced":"0"}],"component":"pyftpdlib","cve_ids":["CVE-2007-6738"],"ecosystem":"PyPI","epss":0.01127,"exploited":false,"fixed_versions":["0.1.1"],"ghsa_id":"GHSA-gh7c-cg3x-pmcr","id":"tcs_01M5KG5BMP2EHABHR46Q1SQY8R","modified_at":"2026-06-10T17:01:43.604312686Z","published_at":"2010-10-19T20:00:00Z","references":["https://osv.dev/vulnerability/PYSEC-2010-22","http://code.google.com/p/pyftpdlib/source/browse/trunk/HISTORY","https://github.com/advisories/GHSA-gh7c-cg3x-pmcr"],"severity":{"label":"unknown"},"sources":[{"source":"osv","source_id":"PYSEC-2010-22","url":"https://osv.dev/vulnerability/PYSEC-2010-22"}],"summary":"pyftpdlib before 0.1.1 does not choose a random value for the port associated with the PASV command, which makes it easier for remote attackers to obtain potentially sensitive information about the nu"}