HOMEVULNERABILITIESVENDORSJsonpickle Project

Jsonpickle ProjectCVEs & Vulnerabilities

1 CVEs affecting Jsonpickle Project products, tracked from the National Vulnerability Database, with CVSS/EPSS scores and exploitation status.

1 CVEs→ All vendors

Most Affected Products

jsonpickle 1
CVE-2020-22083CRITICAL

jsonpickle through 1.4.1 allows remote code execution during deserialization of a malicious payload through the decode() function. Note: It has been argued that this is expected and clearly documented behaviour. pickle is known to be capable of causing arbitrary code execution, and must not be used with un-trusted data

17 Dec 2020
9.8
CVSS
← PrevPage 1 / 1Next →
← All Vendors·CVE Database
Jsonpickle Project CVEs & Vulnerabilities — 1 Tracked