CVE-2026-33155

CVE-2026-33155 affects the Python DeepDiff project. The vulnerability lies in the pickle unpickler _RestrictedUnpickler (versions 5.0.0–before 8.6.2) not constraining constructor arguments for certain SAFE_TO_IMPORT types (e.g., builtins.bytes, builtins.list, builtins.range). A 40-byte pickle pay...