CVE-2025-58367

CVE-2025-58367 affects the Python package DeepDiff (versions 5.0.0–8.6.0). The vulnerability arises from class pollution in the Delta class constructor and a gadget in DeltaDiff that lets an attacker modify deepdiff.serialization.SAFE_TO_IMPORT to permit dangerous classes (e.g., posix.system), en...

CVE-2025-58367 DeepDiff is vulnerable to DoS and Remote Code Execution via Delta class pollution

DeepDiff is a project focused on Deep Difference and search of any Python data. Versions 5.0.0 through 8.6.0 are vulnerable to class pollution via the Delta class constructor, and when combined with a gadget available in DeltaDiff, it can lead to Denial of Service and Remote Code Execution via...

CVE-2025-58367 DeepDiff is vulnerable to DoS and Remote Code Execution via Delta class pollution

DeepDiff is a project focused on Deep Difference and search of any Python data. Versions 5.0.0 through 8.6.0 are vulnerable to class pollution via the Delta class constructor, and when combined with a gadget available in DeltaDiff, it can lead to Denial of Service and Remote Code Execution via...

CVE-2025-58367

DeepDiff is a project focused on Deep Difference and search of any Python data. Versions 5.0.0 through 8.6.0 are vulnerable to class pollution via the Delta class constructor, and when combined with a gadget available in DeltaDiff, it can lead to Denial of Service and Remote Code Execution via...

Malicious code in nectarine-orange-delta-eqmuo (npm)

The package nectarine-orange-delta-eqmuo was found to contain malicious code...

MAL-2025-43956 Malicious code in delta-alpha-charlie-jkmkg (npm)

The package delta-alpha-charlie-jkmkg was found to contain malicious code...

MAL-2025-45287 Malicious code in nectarine-orange-delta-eqmuo (npm)

The package nectarine-orange-delta-eqmuo was found to contain malicious code...

Malicious code in delta-cherry-yam-svnlt (npm)

The package delta-cherry-yam-svnlt was found to contain malicious code...

Malicious code in delta-alpha-charlie-jkmkg (npm)

The package delta-alpha-charlie-jkmkg was found to contain malicious code...

MAL-2025-43957 Malicious code in delta-cherry-yam-svnlt (npm)

The package delta-cherry-yam-svnlt was found to contain malicious code...

MAL-2025-42194 Malicious code in @com-delta-omnichannel/core (npm)

The package @com-delta-omnichannel/core was found to contain malicious code...

Malicious code in @com-delta-omnichannel/core (npm)

The package @com-delta-omnichannel/core was found to contain malicious code...

Malicious code in @com-delta-idp/core (npm)

The package @com-delta-idp/core was found to contain malicious code...

MAL-2025-42193 Malicious code in @com-delta-idp/core (npm)

The package @com-delta-idp/core was found to contain malicious code...

DeepDiff 安全漏洞

DeepDiff is a Python library by the individual developer Sep Dehpour. A security vulnerability exists in DeepDiff 8.6.0 and earlier versions, which stems from Delta class prototype contamination and could lead to denial of service and remote code execution...

CISA Releases Five Industrial Control Systems Advisories

CISA released five Industrial Control Systems ICS advisories on September 4, 2025. These advisories provide timely information about current security issues, vulnerabilities, and exploits surrounding ICS. ICSA-25-247-01 Honeywell OneWireless Wireless Device Manager WDM ICSA-25-217-01 Mitsubishi...

Delta Electronics DIAView Security Bypass Vulnerability

Delta Electronics DIAView is an industrial configuration software from Delta Electronics China. A security bypass vulnerability exists in Delta Electronics DIAView, which can be exploited by attackers to cause authentication bypass...

Class Pollution

Overview deepdiff is a Deep Difference and Search of any Python object/data. Recreate objects by adding adding deltas to each other. Affected versions of this package are vulnerable to Class Pollution via the Delta constructor and manipulation of the SAFETOIMPORT set. An attacker can execute...

GHSA-MW26-5G2V-HQW3 DeepDiff Class Pollution in Delta class leading to DoS, Remote Code Execution, and more

Summary Python class pollution is a novel vulnerability categorized under CWE-915. The Delta class is vulnerable to class pollution via its constructor, and when combined with a gadget available in DeltaDiff itself, it can lead to Denial of Service and Remote Code Execution via insecure Pickle...

DeepDiff Class Pollution in Delta class leading to DoS, Remote Code Execution, and more

Summary Python class pollution is a novel vulnerability categorized under CWE-915. The Delta class is vulnerable to class pollution via its constructor, and when combined with a gadget available in DeltaDiff itself, it can lead to Denial of Service and Remote Code Execution via insecure Pickle...