Lucene search
+L

1 matches found

OSV
OSV
added 2023/10/13 7:25 p.m.80 views

GHSA-5M22-CFQ9-86X6 Pickle serialization vulnerable to Deserialization of Untrusted Data

What We are using pickle as default serialization module but that has known security issues see e.g. https://medium.com/ochrona/python-pickle-is-notoriously-insecure-d6651f1974c9. In summary, it is not advisable to open Pickles that you create yourself locally. In vantage6, algorithms use pickles...

8.6CVSS5.9AI score0.00892EPSS
SaveExploits1References7
Rows per page
Query Builder