{"action":"No fix published. Pin and monitor.","affected":[{"introduced":"0"}],"component":"vim","cve_ids":[],"ecosystem":"Debian","ecosystem_qualifier":"Debian:14","exploited":false,"fixed_versions":[],"id":"tcs_01M5N945ZP1R3ZQFYNMX2ECNAE","modified_at":"2026-10-23T17:47:26.946331899Z","published_at":"2008-10-22T18:00:00.910Z","references":["https://osv.dev/vulnerability/DEBIAN-CVE-2008-4677","https://security-tracker.debian.org/tracker/CVE-2008-4677"],"severity":{"label":"unknown"},"sources":[{"source":"osv","source_id":"DEBIAN-CVE-2008-4677#Debian:14/vim","url":"https://osv.dev/vulnerability/DEBIAN-CVE-2008-4677"}],"summary":"autoload/netrw.vim (aka the Netrw Plugin) 109, 131, and other versions before 133k for Vim 7.1.266, other 7.1 versions, and 7.2 stores credentials for an FTP session, and sends those credentials when"}