Skip to content
OpenAdvisories

Package · PyPI

pyfury

1 known vulnerabilities.

1 result · Feed

  • Critical 9.8
    CVE-2025-61622 EPSS 49%

    Apache Fory, Apache Fory: Python RCE via unguarded pickle fallback serializer in pyfory

    Deserialization of untrusted data in python in pyfory versions 0.12.0 through 0.12.2, or the legacy pyfury versions from 0.1.0 through 0.10.3: allows arbitrary code execution. An application is vulnerable if it reads pyfory serialized data from untrusted sour…