Skip to content
OpenAdvisories

Vendor

treeio

1 known vulnerabilities.

Products

treeio 1
All Critical High Medium Low Exploited only Public exploit

1 result · Clear filters · Feed

  • High 7.2
    CVE-2026-124318

    Treeio through 2.0 Insecure Deserialization RCE via Admin-Editable Pickle Fields

    Treeio through 2.0 contains an insecure deserialization vulnerability in UpdateRecord.get_format_strings and ModuleSetting.loads that allows staff users to execute code via unverified pickle data. Attackers can store a crafted base64 pickle payload in an Upda…

    treeio treeio