OPENSUSE-SU-2025:15613-1 python311-python-socketio-5.14.1-1.1 on GA media

These are all security issues fixed in the python311-python-socketio-5.14.1-1.1 package on the GA media of openSUSE Tumbleweed...

SUSE CVE-2025-61765

python-socketio is a Python implementation of the Socket.IO realtime client and server. A remote code execution vulnerability in python-socketio versions prior to 5.14.0 allows attackers to execute arbitrary Python code through malicious pickle deserialization in multi-server deployments on which...

acho-sdk (>=0.2.10, <=0.3.13), aibro (>=0.5.5, <=1.1.5) +319 more potentially affected by CVE-2025-61765 via python-socketio (>=2.0.0, <=5.13.0)

python-socketio PYPI version =2.0.0, =0.2.10, =0.5.5, =2.1.0rc1, =0.1.1, =0.1.2, =0.1.1, =1.0.0, =0.0.2, =0.0.2rc2, =4.0.4, =0.1.1, =4.1.0, =5.0.0 and more Source cves: CVE-2025-61765 Source advisory: GHSA-G8C6-8FJJ-2R4M...

python-socketio vulnerable to arbitrary Python code execution (RCE) through malicious pickle deserialization in certain multi-server deployments

Summary A remote code execution vulnerability in python-socketio versions prior to 5.14.0 allows attackers to execute arbitrary Python code through malicious pickle deserialization in multi-server deployments on which the attacker previously gained access to the message queue that the servers use...

GHSA-G8C6-8FJJ-2R4M python-socketio vulnerable to arbitrary Python code execution (RCE) through malicious pickle deserialization in certain multi-server deployments

Summary A remote code execution vulnerability in python-socketio versions prior to 5.14.0 allows attackers to execute arbitrary Python code through malicious pickle deserialization in multi-server deployments on which the attacker previously gained access to the message queue that the servers use...

EUVD-2025-32549

python-socketio vulnerable to arbitrary Python code execution RCE through malicious pickle deserialization in certain multi-server deployments...

acho-sdk (>=0.2.10, <=0.3.13), aibro (>=0.5.5, <=1.1.5) +319 more potentially affected by CVE-2025-61765 via python-socketio (>=2.0.0, <=5.13.0)

python-socketio PYPI version =2.0.0, =0.2.10, =0.5.5, =2.1.0rc1, =0.1.1, =0.1.2, =0.1.1, =1.0.0, =0.0.2, =0.0.2rc2, =4.0.4, =0.1.1, =4.1.0, =5.0.0 and more Source cves: CVE-2025-61765 Source advisory: OSV:GHSA-G8C6-8FJJ-2R4M...

acho-sdk (>=0.2.10, <=0.3.13), aibro (>=0.5.5, <=1.1.5) +319 more potentially affected by CVE-2025-61765 via python-socketio (>=2.0.0, <=5.13.0)

python-socketio PYPI version =2.0.0, =0.2.10, =0.5.5, =2.1.0rc1, =0.1.1, =0.1.2, =0.1.1, =1.0.0, =0.0.2, =0.0.2rc2, =4.0.4, =0.1.1, =4.1.0, =5.0.0 and more Source cves: CVE-2025-61765 Source advisory: SNYK:PYTHON-PYTHONSOCKETIO-13450297...

CVE-2025-61765

python-socketio is a Python implementation of the Socket.IO realtime client and server. A remote code execution vulnerability in python-socketio versions prior to 5.14.0 allows attackers to execute arbitrary Python code through malicious pickle deserialization in multi-server deployments on which...

DEBIAN-CVE-2025-61765

python-socketio is a Python implementation of the Socket.IO realtime client and server. A remote code execution vulnerability in python-socketio versions prior to 5.14.0 allows attackers to execute arbitrary Python code through malicious pickle deserialization in multi-server deployments on which...

UBUNTU-CVE-2025-61765

python-socketio is a Python implementation of the Socket.IO realtime client and server. A remote code execution vulnerability in python-socketio versions prior to 5.14.0 allows attackers to execute arbitrary Python code through malicious pickle deserialization in multi-server deployments on which...

acho-sdk (>=0.2.10, <=0.3.13), aibro (>=0.5.5, <=1.1.5) +319 more potentially affected by CVE-2025-61765 via python-socketio (>=2.0.0, <=5.13.0)

python-socketio PYPI version =2.0.0, =0.2.10, =0.5.5, =2.1.0rc1, =0.1.1, =0.1.2, =0.1.1, =1.0.0, =0.0.2, =0.0.2rc2, =4.0.4, =0.1.1, =4.1.0, =5.0.0 and more Source cves: CVE-2025-61765 Source advisory: MEND:CVE-2025-61765...

CVE-2025-61765 python-socketio vulnerable to arbitrary Python code execution (RCE) through malicious pickle deserialization in certain multi-server deployments

python-socketio is a Python implementation of the Socket.IO realtime client and server. A remote code execution vulnerability in python-socketio versions prior to 5.14.0 allows attackers to execute arbitrary Python code through malicious pickle deserialization in multi-server deployments on which...

CVE-2025-61765 python-socketio vulnerable to arbitrary Python code execution (RCE) through malicious pickle deserialization in certain multi-server deployments

python-socketio is a Python implementation of the Socket.IO realtime client and server. A remote code execution vulnerability in python-socketio versions prior to 5.14.0 allows attackers to execute arbitrary Python code through malicious pickle deserialization in multi-server deployments on which...

CVE-2025-61765

python-socketio is a Python implementation of the Socket.IO realtime client and server. A remote code execution vulnerability in python-socketio versions prior to 5.14.0 allows attackers to execute arbitrary Python code through malicious pickle deserialization in multi-server deployments on which...

CVE-2025-61765 python-socketio vulnerable to arbitrary Python code execution (RCE) through malicious pickle deserialization in certain multi-server deployments

python-socketio is a Python implementation of the Socket.IO realtime client and server. A remote code execution vulnerability in python-socketio versions prior to 5.14.0 allows attackers to execute arbitrary Python code through malicious pickle deserialization in multi-server deployments on which...

CVE-2025-61765: Deserialization of Untrusted Data

python-socketio is a Python implementation of the Socket.IO realtime client and server. A remote code execution vulnerability in python-socketio versions prior to 5.14.0 allows attackers to execute arbitrary Python code through malicious pickle deserialization in multi-server deployments on which...

PT-2025-40909

Name of the Vulnerable Software and Affected Versions python-socketio versions prior to 5.14.0 Description python-socketio is a Python implementation of the Socket.IO realtime client and server. A remote code execution issue in python-socketio allows attackers to execute arbitrary Python code...

PT-2025-55027

Уязвимость библиотеки python-socketio связана с недостатками механизма десериализации. Эксплуатация уязвимости может позволить нарушителю, действующему удаленно, выполнить произвольный код...

Python-SocketIO code issues and vulnerabilities

python-socketio is a Python socket library by the individual developer Miguel Grinberg. A code issue vulnerability exists in python-socketio versions prior to 5.14.0 that stems from deserialization using the pickle module, which could lead to remote code execution...