{"action":"Upgrade python-aiosmtpd to 1.4.6-1 or later.","affected":[{"fixed":"1.4.6-1","introduced":"0"}],"component":"python-aiosmtpd","cve_ids":[],"ecosystem":"Debian","ecosystem_qualifier":"Debian:14","exploited":false,"fixed_versions":["1.4.6-1"],"id":"tcs_01M5NKC9J0X2GPPZDA2FN7Q8A1","modified_at":"2026-09-15T09:03:06.659617513Z","published_at":"2024-03-12T21:15:58.630Z","references":["https://osv.dev/vulnerability/DEBIAN-CVE-2024-27305","https://security-tracker.debian.org/tracker/CVE-2024-27305"],"severity":{"label":"medium","score":5.3},"sources":[{"source":"osv","source_id":"DEBIAN-CVE-2024-27305#Debian:14/python-aiosmtpd","url":"https://osv.dev/vulnerability/DEBIAN-CVE-2024-27305"}],"summary":"aiosmtpd is a reimplementation of the Python stdlib smtpd.py based on asyncio. aiosmtpd is vulnerable to inbound SMTP smuggling. SMTP smuggling is a novel vulnerability based on not so novel interpret"}