Deserialization of Untrusted Data

Overview isaaclab is an Isaac Lab Affected versions of this package are vulnerable to Deserialization of Untrusted Data via the deserialization process. An attacker can achieve arbitrary code execution by providing specially crafted data to be deserialized. Details Serialization is a process of...

sai-isaac (>=0.0.5 <=0.0.7) potentially affected by CVE-2025-33210 via isaaclab (=2.0.2)

isaaclab PYPI version =2.0.2 is affected by a known vulnerability. The following packages have a transitive dependency on isaaclab and may be impacted: - sai-isaac =0.0.5, =0.0.7 Source cves: CVE-2025-33210 Source advisory: SNYK:PYTHON-ISAACLAB-14459400...

sai-isaac (>=0.0.5 <=0.0.7) potentially affected by CVE-2025-23356 via isaaclab (=2.0.2)

isaaclab PYPI version =2.0.2 is affected by a known vulnerability. The following packages have a transitive dependency on isaaclab and may be impacted: - sai-isaac =0.0.5, =0.0.7 Source cves: CVE-2025-23356 Source advisory: SNYK:PYTHON-ISAACLAB-13553157...