{"action":"Upgrade impacket to 0.9.22-2 or later.","affected":[{"fixed":"0.9.22-2","introduced":"0"}],"component":"impacket","cve_ids":[],"ecosystem":"Debian","ecosystem_qualifier":"Debian:12","exploited":false,"fixed_versions":["0.9.22-2"],"id":"tcs_01M5NFNT5Y3J5X8MAE4Y0HQWC6","modified_at":"2026-10-23T18:03:14.233329216Z","published_at":"2021-05-05T11:15:07.397Z","references":["https://osv.dev/vulnerability/DEBIAN-CVE-2021-31800","https://security-tracker.debian.org/tracker/CVE-2021-31800"],"severity":{"label":"critical","score":9.8},"sources":[{"source":"osv","source_id":"DEBIAN-CVE-2021-31800","url":"https://osv.dev/vulnerability/DEBIAN-CVE-2021-31800"}],"summary":"Multiple path traversal vulnerabilities exist in smbserver.py in Impacket through 0.9.22. An attacker that connects to a running smbserver instance can list and write to arbitrary files via ../ direct"}