Skip to content
OpenAdvisories

Package · PyPI

scapy

2 known vulnerabilities.

1 result · Clear filters · Feed

  • Medium —

    Scapy Session Loading Vulnerable to Arbitrary Code Execution via Untrusted Pickle Deserialization

    ### Summary An unsafe deserialization vulnerability in Scapy <v2.7.0 allows attackers to execute arbitrary code **when a malicious session file is locally loaded via the `-s` option**. This requires convincing a user to manually load a malicious session file.…