Lucene search
K

65 matches found

IBM Security Bulletins
IBM Security Bulletins
added 2026/05/18 3:29 p.m.7 views

Security Bulletin: IBM Watson Discovery Cartridge affected by vulnerability in deepdiff-8.6.1-py3-none-any.whl

Summary IBM Watson Discovery Cartridge affected by vulnerability in deepdiff-8.6.1-py3-none-any.whl Vulnerability Details CVEID:CVE-2026-33155 DESCRIPTION: DeepDiff is a project focused on Deep Difference and search of any Python data. From version 5.0.0 to before version 8.6.2, the pickle...

8.7CVSS5.7AI score0.00026EPSS
Exploits1Affected Software1
OpenVAS
OpenVAS
added 2026/03/30 12:0 a.m.2 views

openSUSE Security Advisory (SUSE-SU-2026:1094-1)

The remote host is missing an update for the SPDX-FileCopyrightText: 2026 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

8.7CVSS5.8AI score0.00026EPSS
Exploits1References4
OPENSUSE Linux
OPENSUSE Linux
added 2026/03/28 12:0 a.m.2 views

python311-deepdiff-8.6.2-1.1 on GA media (moderate)

python311-deepdiff-8.6.2-1.1 on GA media Announcement ID: openSUSE-SU-2026:10417-1 Rating: moderate Cross-References: CVE-2026-33155 CVSS scores: CVE-2026-33155 SUSE : 7.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H CVE-2026-33155 SUSE : 8.7...

8.7CVSS5.9AI score0.00026EPSS
Exploits1
Tenable Nessus
Tenable Nessus
added 2026/03/28 12:0 a.m.1 views

openSUSE 15 Security Update : python-deepdiff (SUSE-SU-2026:1094-1)

The remote openSUSE 15 host has a package installed that is affected by a vulnerability as referenced in the SUSE- SU-2026:1094-1 advisory. - CVE-2026-33155: Fixed denial of service via builtins.bytes, builtins.list, builtins.range bsc1260064. Tenable has extracted the preceding description block...

8.7CVSS5.9AI score0.00026EPSS
Exploits1References4
SUSE Linux
SUSE Linux
added 2026/03/26 5:56 p.m.1 views

Security update for python-deepdiff

This update for python-deepdiff fixes the following issues: CVE-2026-33155: Fixed denial of service via builtins.bytes, builtins.list, builtins.range bsc1260064. Patch Instructions: To install this SUSE update use the SUSE recommended installation methods like YaST onlineupdate or "zypper patch"...

8.7CVSS5.8AI score0.00026EPSS
Exploits1References4
OSV
OSV
added 2026/03/26 5:56 p.m.0 views

SUSE-SU-2026:1094-1 Security update for python-deepdiff

This update for python-deepdiff fixes the following issues: - CVE-2026-33155: Fixed denial of service via builtins.bytes, builtins.list, builtins.range bsc1260064...

8.7CVSS5.8AI score0.00026EPSS
Exploits1References3
SUSE CVE
SUSE CVE
added 2026/03/24 12:24 a.m.2 views

SUSE CVE-2026-33155

DeepDiff is a project focused on Deep Difference and search of any Python data. From version 5.0.0 to before version 8.6.2, the pickle unpickler RestrictedUnpickler validates which classes can be loaded but does not limit their constructor arguments. A few of the types in SAFETOIMPORT have...

7.5CVSS5.8AI score0.00026EPSS
Exploits1References4
OSV
OSV
added 2026/03/24 12:0 a.m.1 views

OPENSUSE-SU-2026:10417-1 python311-deepdiff-8.6.2-1.1 on GA media

These are all security issues fixed in the python311-deepdiff-8.6.2-1.1 package on the GA media of openSUSE Tumbleweed...

8.7CVSS5.8AI score0.00026EPSS
Exploits1References1
RedhatCVE
RedhatCVE
added 2026/03/23 10:53 a.m.1 views

CVE-2026-33155

A flaw was found in DeepDiff. A remote attacker could exploit a vulnerability in the RestrictedUnpickler component, which fails to limit constructor arguments for certain data types. By providing a specially crafted, small pickle payload, an attacker can force the application to allocate an...

8.7CVSS5.8AI score0.00026EPSS
Exploits1References5
Veracode
Veracode
added 2026/03/21 5:22 a.m.1 views

Denial Of Service (DoS)

DeepDiff is vulnerable to Denial Of Service DoS. The vulnerability is due to insufficient restriction on constructor arguments during pickle deserialization, which allows an attacker to supply crafted payloads that trigger excessive memory allocation and crash the application...

8.7CVSS5.7AI score0.00026EPSS
Exploits1References2Affected Software1
Tenable Nessus
Tenable Nessus
added 2026/03/21 12:0 a.m.4 views

Linux Distros Unpatched Vulnerability : CVE-2025-58367

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - DeepDiff is a project focused on Deep Difference and search of any Python data. Versions 5.0.0 through 8.6.0 are vulnerable to class pollution via the Delta cla...

10CVSS5.9AI score0.00267EPSS
Exploits0References3
Tenable Nessus
Tenable Nessus
added 2026/03/21 12:0 a.m.4 views

Linux Distros Unpatched Vulnerability : CVE-2026-33155

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - DeepDiff is a project focused on Deep Difference and search of any Python data. From version 5.0.0 to before version 8.6.2, the pickle unpickler...

8.7CVSS5.7AI score0.00026EPSS
Exploits1References3
OSV
OSV
added 2026/03/20 9:17 p.m.1 views

DEBIAN-CVE-2026-33155

DeepDiff is a project focused on Deep Difference and search of any Python data. From version 5.0.0 to before version 8.6.2, the pickle unpickler RestrictedUnpickler validates which classes can be loaded but does not limit their constructor arguments. A few of the types in SAFETOIMPORT have...

7.5CVSS5.4AI score0.00026EPSS
Exploits1References1
NVD
NVD
added 2026/03/20 9:17 p.m.2 views

CVE-2026-33155

DeepDiff is a project focused on Deep Difference and search of any Python data. From version 5.0.0 to before version 8.6.2, the pickle unpickler RestrictedUnpickler validates which classes can be loaded but does not limit their constructor arguments. A few of the types in SAFETOIMPORT have...

8.7CVSS0.00026EPSS
Exploits1References2
OSV
OSV
added 2026/03/20 9:17 p.m.1 views

UBUNTU-CVE-2026-33155

DeepDiff is a project focused on Deep Difference and search of any Python data. From version 5.0.0 to before version 8.6.2, the pickle unpickler RestrictedUnpickler validates which classes can be loaded but does not limit their constructor arguments. A few of the types in SAFETOIMPORT have...

8.7CVSS5.8AI score0.00026EPSS
Exploits1References4
UbuntuCve
UbuntuCve
added 2026/03/20 9:17 p.m.0 views

CVE-2026-33155

DeepDiff is a project focused on Deep Difference and search of any Python data. From version 5.0.0 to before version 8.6.2, the pickle unpickler RestrictedUnpickler validates which classes can be loaded but does not limit their constructor arguments. A few of the types in SAFETOIMPORT have...

8.7CVSS5.9AI score0.00026EPSS
Exploits1References3
CVE
CVE
added 2026/03/20 8:25 p.m.6 views

CVE-2026-33155

CVE-2026-33155 affects the Python DeepDiff project. The vulnerability lies in the pickle unpickler _RestrictedUnpickler (versions 5.0.0–before 8.6.2) not constraining constructor arguments for certain SAFE_TO_IMPORT types (e.g., builtins.bytes, builtins.list, builtins.range). A 40-byte pickle pay...

8.7CVSS5.8AI score0.00026EPSS
Exploits1References2Affected Software1
Cvelist
Cvelist
added 2026/03/20 8:25 p.m.21 views

CVE-2026-33155 DeepDiff has Memory Exhaustion DoS through SAFE_TO_IMPORT

DeepDiff is a project focused on Deep Difference and search of any Python data. From version 5.0.0 to before version 8.6.2, the pickle unpickler RestrictedUnpickler validates which classes can be loaded but does not limit their constructor arguments. A few of the types in SAFETOIMPORT have...

8.7CVSS0.00026EPSS
Exploits1References2
Vulnrichment
Vulnrichment
added 2026/03/20 8:25 p.m.1 views

CVE-2026-33155 DeepDiff has Memory Exhaustion DoS through SAFE_TO_IMPORT

DeepDiff is a project focused on Deep Difference and search of any Python data. From version 5.0.0 to before version 8.6.2, the pickle unpickler RestrictedUnpickler validates which classes can be loaded but does not limit their constructor arguments. A few of the types in SAFETOIMPORT have...

8.7CVSS5.8AI score0.00026EPSS
Exploits1References2
OSV
OSV
added 2026/03/20 8:25 p.m.0 views

CVE-2026-33155 DeepDiff has Memory Exhaustion DoS through SAFE_TO_IMPORT

DeepDiff is a project focused on Deep Difference and search of any Python data. From version 5.0.0 to before version 8.6.2, the pickle unpickler RestrictedUnpickler validates which classes can be loaded but does not limit their constructor arguments. A few of the types in SAFETOIMPORT have...

8.7CVSS5.8AI score0.00026EPSS
Exploits1References4
Rows per page
Query Builder