{"action":"Upgrade pypy3 to 7.3.5+dfsg-2 or later.","affected":[{"fixed":"7.3.5+dfsg-2","introduced":"0"}],"component":"pypy3","cve_ids":[],"ecosystem":"Debian","ecosystem_qualifier":"Debian:12","exploited":false,"fixed_versions":["7.3.5+dfsg-2"],"id":"tcs_01M5NG0HNTCV1JBFZWW02P1THW","modified_at":"2026-10-15T09:47:40.336446707Z","published_at":"2022-08-24T16:15:09.827Z","references":["https://osv.dev/vulnerability/DEBIAN-CVE-2021-4189","https://security-tracker.debian.org/tracker/CVE-2021-4189"],"severity":{"label":"medium","score":5.3},"sources":[{"source":"osv","source_id":"DEBIAN-CVE-2021-4189","url":"https://osv.dev/vulnerability/DEBIAN-CVE-2021-4189"}],"summary":"A flaw was found in Python, specifically in the FTP (File Transfer Protocol) client library in PASV (passive) mode. The issue is how the FTP client trusts the host from the PASV response by default. T"}