Lucene search
+L

6 matches found

Github Security Blog
Github Security Blog
added 2025/10/07 12:55 p.m.11 views

python-socketio vulnerable to arbitrary Python code execution (RCE) through malicious pickle deserialization in certain multi-server deployments

Summary A remote code execution vulnerability in python-socketio versions prior to 5.14.0 allows attackers to execute arbitrary Python code through malicious pickle deserialization in multi-server deployments on which the attacker previously gained access to the message queue that the servers use...

6.4CVSS8.5AI score0.00446EPSS
SaveExploits0References5Affected Software1
Rows per page
Query Builder