Skip to content
OpenAdvisories

Package · Debian

deepdiff

2 known vulnerabilities.

2 results · Feed

  • High 8.7

    DeepDiff has Memory Exhaustion DoS through SAFE_TO_IMPORT

    DeepDiff is a project focused on Deep Difference and search of any Python data. From version 5.0.0 to before version 8.6.2, the pickle unpickler _RestrictedUnpickler validates which classes can be loaded but does not limit their constructor arguments. A few o…

  • Critical 10.0

    DeepDiff is vulnerable to DoS and Remote Code Execution via Delta class pollution

    DeepDiff is a project focused on Deep Difference and search of any Python data. Versions 5.0.0 through 8.6.0 are vulnerable to class pollution via the Delta class constructor, and when combined with a gadget available in DeltaDiff, it can lead to Denial of Se…