Lucene search
+L

2 matches found

OSV
OSV
added 2026/03/15 11:10 a.m.11 views

OESA-2026-1594 python-ply security update

/ply/ /ply--.egg-info/ Security Fixes: An undocumented and unsafe feature in the PLY Python Lex-Yacc library 3.11 allows Remote Code Execution RCE via the picklefile parameter in the yacc function. This parameter accepts a .pkl file that is deserialized with pickle.load without validation. Becaus...

9.8CVSS6.4AI score0.17149EPSS
SaveExploits3References2
UbuntuCve
UbuntuCve
added 2026/01/20 7:15 p.m.8 views

CVE-2025-56005

An undocumented and unsafe feature in the PLY Python Lex-Yacc library 3.11 allows Remote Code Execution RCE via the picklefile parameter in the yacc function. This parameter accepts a .pkl file that is deserialized with pickle.load without validation. Because pickle allows execution of embedded...

9.8CVSS7.8AI score0.17149EPSS
SaveExploits3References2
Rows per page
Query Builder