CVE-2026-31072

The JSONSerializer and CBORSerializer in APScheduler all versions including 3.10.x and 4.0.0a5 are vulnerable to Remote Code Execution RCE via Insecure Deserialization. The unmarshalobject function allows for arbitrary class instantiation and state injection by dynamically importing modules and...

akaze (>=0.1.0, <=0.1.2), babelfish (>=0.1.0, <=0.1.1) +73 more potentially affected by CVE-2019-25001 via serde_cbor (>=0.3.3, <=0.9.0)

serdecbor CARGO version =0.3.3, =0.1.0, =0.1.0, =0.1.0, =0.1.0, =0.1.0, =0.10.0, =0.10.0, =0.10.0, =0.1.0, =0.1.0, =0.1.0, =0.0.1, =0.0.3 - ec-client 0.1.0 and more Source cves: CVE-2019-25001 Source advisory: OSV:GHSA-XR7R-88QV-Q7HM...