PYSEC-2026-2447 DiskCache has unsafe pickle deserialization

DiskCache python-diskcache through 5.6.3 uses Python pickle for serialization by default. An attacker with write access to the cache directory can achieve arbitrary code execution when a victim application reads from the cache...

simpleflow (>=0.21.4, <=0.21.13) potentially affected by CVE-2025-69872 via diskcache (2.4.1)

diskcache PYPI version 2.4.1 is affected by a known vulnerability. The following packages have a transitive dependency on diskcache and may be impacted: - simpleflow =0.21.4, =0.21.13 Source cves: CVE-2025-69872 Source advisory: OSV:PYSEC-2026-2447...

aioimdb (>=1.0.5, <=1.1.2), opus-api (0.5.0) potentially affected by CVE-2025-69872 via diskcache (3.0.1)

diskcache PYPI version 3.0.1 is affected by a known vulnerability. The following packages have a transitive dependency on diskcache and may be impacted: - aioimdb =1.0.5, =1.1.2 - opus-api 0.5.0 Source cves: CVE-2025-69872 Source advisory: OSV:PYSEC-2026-2447...

apache-liminal (>=0.0.3rc1, <=0.0.5), apache-liminal-test-spark (0.0.0) +7 more potentially affected by CVE-2025-69872 via diskcache (3.1.1)

diskcache PYPI version 3.1.1 is affected by a known vulnerability. The following packages have a transitive dependency on diskcache and may be impacted: - apache-liminal =0.0.3rc1, =0.0.0, =7.0.0a1, =1.2.0, =4.1.0, =6.0.0, =0.2.5, =0.2.7 - mars-gym 0.1.0 Source cves: CVE-2025-69872 Source advisor...

humanframework (>=0.6.0, <=0.6.2) potentially affected by CVE-2025-69872 via diskcache (4.0.0)

diskcache PYPI version 4.0.0 is affected by a known vulnerability. The following packages have a transitive dependency on diskcache and may be impacted: - humanframework =0.6.0, =0.6.2 Source cves: CVE-2025-69872 Source advisory: OSV:PYSEC-2026-2447...

comi (>=0.1.1, <=0.1.2), crawlib (>=0.1.0, <=0.1.1) +8 more potentially affected by CVE-2025-69872 via diskcache (4.1.0)

diskcache PYPI version 4.1.0 is affected by a known vulnerability. The following packages have a transitive dependency on diskcache and may be impacted: - comi =0.1.1, =0.1.0, =1.4.0, =0.1.0, =1.0.60, =0.1.0, =0.0.8, =0.4.0, =1.3.0, =1.3.6 Source cves: CVE-2025-69872 Source advisory:...

DiskCache has unsafe pickle deserialization

DiskCache python-diskcache through 5.6.3 uses Python pickle for serialization by default. An attacker with write access to the cache directory can achieve arbitrary code execution when a victim application reads from the cache...

3thfloor (>=0.1.0, <=0.1.3), a-simple-llm-kit (>=0.3.0, <=0.4.2) +3808 more potentially affected by CVE-2025-69872 via diskcache (>=5.0.3, <=5.6.3)

diskcache PYPI version =5.0.3, =0.1.0, =0.3.0, =0.9.2, =0.1.0, =0.2.1, =0.1.1.dev1, =0.1.0, =0.1.0, =0.3.4, =0.1.1, =0.3.3, =1.0.25, =0.1.32, =0.1.35 and more Source cves: CVE-2025-69872 Source advisory: OSV:PYSEC-2026-2447...

aioimdb (>=1.0.0, <=1.0.4), imdbpie (>=5.0.0, <=5.6.5) +2 more potentially affected by CVE-2025-69872 via diskcache (2.9.0)

diskcache PYPI version 2.9.0 is affected by a known vulnerability. The following packages have a transitive dependency on diskcache and may be impacted: - aioimdb =1.0.0, =5.0.0, =0.1.4, =0.21.16, =0.21.18 Source cves: CVE-2025-69872 Source advisory: OSV:PYSEC-2026-2447...

PT-2026-59116

DiskCache python-diskcache through 5.6.3 uses Python pickle for serialization by default. An attacker with write access to the cache directory can achieve arbitrary code execution when a victim application reads from the cache...

Security Bulletin: Vulnerability in DiskCache with IBM Fusion, IBM Fusion HCI and IBM Fusion Content-Aware Storage.

Summary IBM Fusion, IBM Fusion HCI and IBM Fusion Content-Aware Storage includes DiskCache python-diskcache. Following vulnerability can achieve arbitrary code execution. CVE-2025-69872. Vulnerability Details CVEID:CVE-2025-69872 DESCRIPTION: DiskCache python-diskcache through 5.6.3 uses Python...

[SECURITY] Fedora 42 Update: python-diskcache-5.6.3-12.fc42

DiskCache is an Apache2 licensed disk and file backed cache library, written in pure-Python, and compatible with Django...

[SECURITY] Fedora 43 Update: python-diskcache-5.6.3-12.fc43

DiskCache is an Apache2 licensed disk and file backed cache library, written in pure-Python, and compatible with Django...

[SECURITY] Fedora 44 Update: python-diskcache-5.6.3-12.fc44

DiskCache is an Apache2 licensed disk and file backed cache library, written in pure-Python, and compatible with Django...

Fedora 42 : python-diskcache (2026-9e5037f4e6)

The remote Fedora 42 host has a package installed that is affected by a vulnerability as referenced in the FEDORA-2026-9e5037f4e6 advisory. Incorporate patch from Sam Doran to fix CVE-2025-69872 Tenable has extracted the preceding description block directly from the Fedora security advisory. Note...

Fedora: Security Advisory (FEDORA-2026-319d85836c)

The remote host is missing an update for the SPDX-FileCopyrightText: 2026 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

Fedora: Security Advisory (FEDORA-2026-9e5037f4e6)

The remote host is missing an update for the SPDX-FileCopyrightText: 2026 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

Fedora 44 : python-diskcache (2026-56264d0a56)

The remote Fedora 44 host has a package installed that is affected by a vulnerability as referenced in the FEDORA-2026-56264d0a56 advisory. Incorporate patch from Sam Doran to fix CVE-2025-69872 Tenable has extracted the preceding description block directly from the Fedora security advisory. Note...

Fedora 43 : python-diskcache (2026-319d85836c)

The remote Fedora 43 host has a package installed that is affected by a vulnerability as referenced in the FEDORA-2026-319d85836c advisory. Incorporate patch from Sam Doran to fix CVE-2025-69872 Tenable has extracted the preceding description block directly from the Fedora security advisory. Note...

Linux Distros Unpatched Vulnerability : CVE-2025-69872

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - DiskCache python-diskcache through 5.6.3 uses Python pickle for serialization by default. An attacker with write access to the cache directory can achieve...