{"action":"Upgrade commons-net:commons-net to 3.9.0 or later.","affected":[{"fixed":"3.9.0","introduced":"0"}],"component":"commons-net:commons-net","cve_ids":["CVE-2021-37533"],"ecosystem":"Maven","epss":0.02129,"exploited":false,"fixed_versions":["3.9.0"],"ghsa_id":"GHSA-cgp8-4m63-fhh5","id":"tcs_01M5N8SDCF92EB0WX21AT5JZDF","modified_at":"2026-09-10T03:49:47.609594222Z","published_at":"2022-12-03T15:30:26Z","references":["https://osv.dev/vulnerability/GHSA-cgp8-4m63-fhh5","https://nvd.nist.gov/vuln/detail/CVE-2021-37533","https://github.com/apache/commons-net/commit/4fe1bae56e53f32756b1ca3296f3dd2c45e3e060","https://github.com/apache/commons-net","https://issues.apache.org/jira/browse/NET-711","https://lists.apache.org/thread/o6yn9r9x6s94v97264hmgol1sf48mvx7","https://lists.debian.org/debian-lts-announce/2022/12/msg00038.html","https://www.debian.org/security/2022/dsa-5307","http://www.openwall.com/lists/oss-security/2022/12/03/1"],"severity":{"label":"medium","score":6.5},"sources":[{"source":"osv","source_id":"GHSA-cgp8-4m63-fhh5","url":"https://osv.dev/vulnerability/GHSA-cgp8-4m63-fhh5"}],"summary":"Apache Commons Net vulnerable to information leakage via malicious server"}