← Back

Jsonpickle

jsonpickle

Vendor: Jsonpickle Project • 1 CVE

CVEs (1)

CVE
VENDORS
PRODUCTS
UPDATED
PUBLISHED
CVSS
CVE-2020-22083
1Jsonpickle Project
1Jsonpickle
Jun 17, 2026
Dec 17, 2020
N/A· v4
9.8 CRITICAL· v3
7.5 HIGH· v2
jsonpickle through 1.4.1 allows remote code execution during deserialization of a malicious payload through the decode() function. Note: It has been argued that this is expected and clearly documented behaviour. pickle i...Show more
jsonpickle through 1.4.1 allows remote code execution during deserialization of a malicious payload through the decode() function. Note: It has been argued that this is expected and clearly documented behaviour. pickle is known to be capable of causing arbitrary code execution, and must not be used with un-trusted dataShow less