Description
ERC (aka Emotion Recognition in Conversation) through 0.3 has insecure deserialization via a serialized object because jsonpickle is used.
Affected products
| Vendor | Product | Affected | Fixed |
|---|---|---|---|
| tae898 | ERC | ≤ 0.3 | — |
Medium · 5.7
CVE-2025-55136
EUVD-2025-23928GHSA-545r-6hgf-cr23
ERC (aka Emotion Recognition in Conversation) through 0.3 has insecure deserialization via a serialized object because jsonpickle is used.
Published Aug 7, 2025 · Updated Aug 7, 2025 · Assigned by mitre