Skip to content
OpenAdvisories

Package · Debian

python-socketio

2 known vulnerabilities.

1 result · Clear filters · Feed

  • Medium 6.4

    python-socketio vulnerable to arbitrary Python code execution (RCE) through malicious pickle deserialization in certain multi-server deployments

    python-socketio is a Python implementation of the Socket.IO realtime client and server. A remote code execution vulnerability in python-socketio versions prior to 5.14.0 allows attackers to execute arbitrary Python code through malicious pickle deserializatio…