{"action":"Upgrade mailman to 2.1.38 or later.","affected":[{"fixed":"2.1.38","introduced":"0"}],"component":"mailman","cve_ids":["CVE-2021-44227"],"ecosystem":"PyPI","epss":0.00757,"exploited":false,"fixed_versions":["2.1.38"],"ghsa_id":"GHSA-xq58-69h2-765m","id":"tcs_01M5KHCR6PEMYSW40JANVR8QBN","modified_at":"2026-07-06T08:00:43.410272699Z","published_at":"2026-07-02T14:13:14.288696Z","references":["https://osv.dev/vulnerability/PYSEC-2026-660","https://nvd.nist.gov/vuln/detail/CVE-2021-44227","https://bugs.launchpad.net/mailman/+bug/1952384","https://gitlab.com/mailman/mailman","https://lists.debian.org/debian-lts-announce/2022/06/msg00011.html","https://pypi.org/project/mailman","https://github.com/advisories/GHSA-xq58-69h2-765m"],"severity":{"label":"high","score":8.8},"sources":[{"source":"osv","source_id":"PYSEC-2026-660","url":"https://osv.dev/vulnerability/PYSEC-2026-660"}],"summary":"Cross Site Request Forgery in mailman"}