PyPi: Jsonpickle

PVE-2024-72982

Safety vulnerability ID: 72982

This vulnerability was reviewed by experts

The information on this page was manually curated by our Cybersecurity Intelligence Team.

Created at Sep 02, 2024 Updated at Nov 12, 2024

Advisory

Jsonpickle affected versions are vulnerable to arbitrary code execution during deserializ…

[This advisory has been limited. Please create a free account to view the full advisory.]

Affected package

jsonpickle

Latest version: 4.0.0

jsonpickle encodes/decodes any Python object to/from JSON

Affected versions

Fixed versions

Vulnerability changelog

====== * The unpickler was updated to avoid using ``eval``, which helps improve its …

[This text has been limited. Please create a free account to view the full text.]

Resources