CVE-2025-5174

creationtimestamp| type| source ---|---|--- 2025-05-26 07:46:54+00:00| published-proof-of-concept| https://t.me/DarkWebInformerCVEAlerts/17534 2025-05-26 15:07:31+00:00| seen| https://bsky.app/profile/cecallihelper.bsky.social/post/3lq3hbcard22y...

CVE-2025-5174

CVE-2025-5174 affects the erdogant pypickle package up to version 1.1.5. The vulnerability is in the load function of pypickle/pypickle.py, enabling deserialization with local access. The exploit has been disclosed, and upgrading to version 2.0.0 is reported to address the issue (patch 14b4cae704...

CVE-2025-5174 erdogant pypickle pypickle.py load deserialization

A vulnerability was found in erdogant pypickle up to 1.1.5 and classified as problematic. Affected by this issue is the function load of the file pypickle/pypickle.py. The manipulation leads to deserialization. Local access is required to approach this attack. The exploit has been disclosed to th...