A flaw was found in Python, specifically in the FTP (File Transfer Protocol) client library in PASV (passive) mode. The issue is how the FTP client trusts the host from the PASV response by default. This flaw allows an attacker to set up a …

{
                    "vendor": "n/a",
                    "product": "python",
                    "versions": [
                        {
                            "version": "Fixed in python 3.6.14, python 3.7.11, python 3.8.9, python 3.9.3, python 3.10.0",
                            "status": "affected"
                        }
                    ]
                }