cbcvebase.

Jsonpickle Python Jsonpickle vulnerabilities

1 known vulnerability affecting jsonpickle/python_jsonpickle.

Total CVEs
1
CISA KEV
0
Public exploits
0
Exploited in wild
0
Severity breakdown
CRITICAL1

Vulnerabilities

Page 1 of 1
CVE-2021-47952P2CRITICALCVSS 9.8v2.0.02026-05-16
CVE-2021-47952 [CRITICAL] CWE-94 CVE-2021-47952: python jsonpickle 2.0.0 contains a remote code execution vulnerability that allows attackers to exec python jsonpickle 2.0.0 contains a remote code execution vulnerability that allows attackers to execute arbitrary Python commands by deserializing malicious JSON payloads containing py/repr objects. Attackers can craft JSON strings with py/repr directives that invoke the eval function during deserialization to execute arbitrary code.
nvd
Jsonpickle Python Jsonpickle vulnerabilities | cvebase