Skip to content
OpenAdvisories

Package · PyPI

upsonic

3 known vulnerabilities.

All Critical High Medium Low Exploited only Public exploit

2 results · Clear filters · Feed

  • Medium 5.5
    CVE-2025-6279

    Upsonic Pickle add_tool cloudpickle.loads deserialization

    A vulnerability, which was classified as critical, has been found in Upsonic up to 0.55.6. This issue affects the function cloudpickle.loads of the file /tools/add_tool of the component Pickle Handler. The manipulation leads to deserialization. The exploit ha…

    upsonic PyPI
  • Medium 5.5
    CVE-2025-6278

    Upsonic server.py os.path.join path traversal

    A vulnerability classified as critical was found in Upsonic up to 0.55.6. This vulnerability affects the function os.path.join of the file markdown/server.py. The manipulation of the argument file.filename leads to path traversal. The exploit has been disclos…

    upsonic PyPI