Skip to content
OpenAdvisories

Product · Jsonpickle

python jsonpickle

1 known vulnerabilities.

1 result · Clear filters · Feed

  • Critical 9.8

    python jsonpickle 2.0.0 Remote Code Execution via py/repr

    python jsonpickle 2.0.0 contains a remote code execution vulnerability that allows attackers to execute arbitrary Python commands by deserializing malicious JSON payloads containing py/repr objects. Attackers can craft JSON strings with py/repr directives tha…