Code Injection

loguru is vulnerable to code injection. The vulnerability exists in reduce function in recattrs.py due to the use of pickle.loads which allows an attacker to inject and execute arbitrary codes...

CVE-2022-0329

Rejected reason: DO NOT USE THIS CANDIDATE NUMBER. Reason: This CVE has been rejected as it was incorrectly assigned. All references and descriptions in this candidate have been removed to prevent accidental usage...

PYSEC-2022-15

This CVE has been rejected as it was incorrectly assigned...

PT-2022-13109 · Loguru · Loguru

Name of the Vulnerable Software and Affected Versions: loguru versions prior to 0.6.0 Description: The issue concerns a lack of sanitization on log serialization, which can lead to arbitrary code execution. The function in question is intended for internal use only but is not restricted. This iss...