← Back

Upsonic

upsonic

2 CVEs • 1 product

Products (1)

Click to collapse
Toggle
Upsonic
upsonic
2 CVEs

CVEs (2)

CVE
VENDORS
PRODUCTS
UPDATED
PUBLISHED
CVSS
CVE-2025-6279
1Upsonic
1Upsonic
Jun 17, 2026
Jun 19, 2025
2.0 LOW· v4
8.0 HIGH· v3
5.2 MEDIUM· v2
A vulnerability, which was classified as critical, has been found in Upsonic up to 0.55.6. This issue affects the function cloudpickle.loads of the file /tools/add_tool of the component Pickle Handler. The manipulation l...Show more
A vulnerability, which was classified as critical, has been found in Upsonic up to 0.55.6. This issue affects the function cloudpickle.loads of the file /tools/add_tool of the component Pickle Handler. The manipulation leads to deserialization. The exploit has been disclosed to the public and may be used.Show less
CVE-2025-6278
1Upsonic
1Upsonic
Jun 17, 2026
Jun 19, 2025
2.0 LOW· v4
9.8 CRITICAL· v3
5.2 MEDIUM· v2
A vulnerability classified as critical was found in Upsonic up to 0.55.6. This vulnerability affects the function os.path.join of the file markdown/server.py. The manipulation of the argument file.filename leads to path...Show more
A vulnerability classified as critical was found in Upsonic up to 0.55.6. This vulnerability affects the function os.path.join of the file markdown/server.py. The manipulation of the argument file.filename leads to path traversal. The exploit has been disclosed to the public and may be used.Show less