Логотип exploitDog
Консоль
Логотип exploitDog

exploitDog

github логотип

GHSA-w8v5-vhqr-4h9v

Опубликовано: 11 фев. 2026
Источник: github
Github: Прошло ревью
CVSS4: 5.2

Описание

DiskCache has unsafe pickle deserialization

DiskCache (python-diskcache) through 5.6.3 uses Python pickle for serialization by default. An attacker with write access to the cache directory can achieve arbitrary code execution when a victim application reads from the cache.

Пакеты

Наименование

diskcache

pip
Затронутые версииВерсия исправления

<= 5.6.3

Отсутствует

EPSS

Процентиль: 12%
0.00039
Низкий

5.2 Medium

CVSS4

Дефекты

CWE-502
CWE-94

Связанные уязвимости

CVSS3: 9.8
ubuntu
около 2 месяцев назад

DiskCache (python-diskcache) through 5.6.3 uses Python pickle for serialization by default. An attacker with write access to the cache directory can achieve arbitrary code execution when a victim application reads from the cache.

CVSS3: 7.6
redhat
около 2 месяцев назад

DiskCache (python-diskcache) through 5.6.3 uses Python pickle for serialization by default. An attacker with write access to the cache directory can achieve arbitrary code execution when a victim application reads from the cache.

CVSS3: 9.8
nvd
около 2 месяцев назад

DiskCache (python-diskcache) through 5.6.3 uses Python pickle for serialization by default. An attacker with write access to the cache directory can achieve arbitrary code execution when a victim application reads from the cache.

CVSS3: 9.8
debian
около 2 месяцев назад

DiskCache (python-diskcache) through 5.6.3 uses Python pickle for seri ...

EPSS

Процентиль: 12%
0.00039
Низкий

5.2 Medium

CVSS4

Дефекты

CWE-502
CWE-94