EUVD-2023-0257

🗓️ 03 Oct 2025 20:07:09Reported by EUVDType

vantage6 prior to version 4.0.0 has a security issue with default serialization module pickle

Reporter	Title	Published	Views	Family All 16
Circl	CVE-2023-23930	11 Oct 202322:17	–	circl
CNNVD	vantage6 Code Issue Vulnerability	11 Oct 202300:00	–	cnnvd
CVE	CVE-2023-23930	11 Oct 202317:39	–	cve
Cvelist	CVE-2023-23930 vantage6's Pickle serialization is insecure	11 Oct 202317:39	–	cvelist
Github Security Blog	Pickle serialization vulnerable to Deserialization of Untrusted Data	13 Oct 202319:25	–	github
NVD	CVE-2023-23930	11 Oct 202318:15	–	nvd
OSV	CVE-2023-23930 vantage6's Pickle serialization is insecure	11 Oct 202317:39	–	osv
OSV	GHSA-5M22-CFQ9-86X6 Pickle serialization vulnerable to Deserialization of Untrusted Data	13 Oct 202319:25	–	osv
OSV	PYSEC-2023-196	11 Oct 202318:15	–	osv
Prion	Default configuration	11 Oct 202318:15	–	prion

[
  {
    "enisaIdVendor": [
      {
        "id": "c15037cc-80da-3dcd-b8fb-d76e72d18021",
        "vendor": {
          "name": "vantage6"
        }
      }
    ],
    "enisaIdProduct": [
      {
        "id": "f4420732-c9c5-3858-86c8-647629c7bc04",
        "product": {
          "name": "vantage6"
        },
        "product_version": "< 4.0.0"
      }
    ]
  }
]

Source	Link
medium	www.medium.com/ochrona/python-pickle-is-notoriously-insecure-d6651f1974c9
medium	www.medium.com/ochrona/python-pickle-is-notoriously-insecure-d6651f1974c9
github	www.github.com/vantage6/vantage6/security/advisories/GHSA-5m22-cfq9-86x6
github	www.github.com/vantage6/vantage6/blob/0682c4288f43fee5bcc72dc448cdd99bd7e57f76/docs/release_notes.rst
github	www.github.com/vantage6/vantage6/commit/e62f03bacf2247bd59eed217e2e7338c3a01a5f0
nvd	www.nvd.nist.gov/vuln/detail/CVE-2023-23930
github	www.github.com/pypa/advisory-database/tree/main/vulns/vantage6/PYSEC-2023-196.yaml

03 Oct 2025 20:07Current

6.9Medium risk

Vulners AI Score6.9

CVSS 3.15.5 - 7.2

EPSS0.00799

SSVC