{"action":"Upgrade binwalk to 2.3.3 or later.","affected":[{"fixed":"2.3.3","introduced":"0"}],"component":"binwalk","cve_ids":["CVE-2021-4287"],"ecosystem":"PyPI","epss":0.02039,"exploited":false,"fixed_versions":["2.3.3"],"ghsa_id":"GHSA-8m3f-g62j-3vx8","id":"tcs_01M5KHDJ5VYCHSRWPX9TYGDFS1","modified_at":"2026-07-07T11:45:43.150170587Z","published_at":"2026-07-07T10:17:25.876034Z","references":["https://osv.dev/vulnerability/PYSEC-2026-788","https://nvd.nist.gov/vuln/detail/CVE-2021-4287","https://github.com/ReFirmLabs/binwalk/pull/556","https://github.com/ReFirmLabs/binwalk/commit/fa0c0bd59b8588814756942fe4cb5452e76c1dcd","https://github.com/ReFirmLabs/binwalk","https://github.com/ReFirmLabs/binwalk/releases/tag/v2.3.3","https://vuldb.com/?ctiid.216876","https://vuldb.com/?id.216876","https://pypi.org/project/binwalk","https://github.com/advisories/GHSA-8m3f-g62j-3vx8"],"severity":{"label":"medium","score":6.5},"sources":[{"source":"osv","source_id":"PYSEC-2026-788","url":"https://osv.dev/vulnerability/PYSEC-2026-788"}],"summary":"binwalk vulnerable to UNIX Symbolic Link (Symlink) Following"}