{"action":"Upgrade pypy3 to 7.3.20+dfsg-2 or later.","affected":[{"fixed":"7.3.20+dfsg-2","introduced":"0"}],"component":"pypy3","cve_ids":[],"ecosystem":"Debian","ecosystem_qualifier":"Debian:14","exploited":false,"fixed_versions":["7.3.20+dfsg-2"],"id":"tcs_01M5NNW7TF761831DRTBC9FVDK","modified_at":"2026-09-01T20:05:52.495240476Z","published_at":"2025-06-03T13:15:20.503Z","references":["https://osv.dev/vulnerability/DEBIAN-CVE-2025-4330","https://security-tracker.debian.org/tracker/CVE-2025-4330"],"severity":{"label":"high","score":7.5},"sources":[{"source":"osv","source_id":"DEBIAN-CVE-2025-4330#Debian:14/pypy3","url":"https://osv.dev/vulnerability/DEBIAN-CVE-2025-4330"}],"summary":"Allows the extraction filter to be ignored, allowing symlink targets to point outside the destination directory, and the modification of some file metadata. You are affected by this vulnerability if u"}