Affected: Homebrew: aider

DiskCache (python-diskcache) through 5.6.3 uses Python pickle for serialization by default. An attacker with write access to the cache directory can achieve arbitrary code execution when a victim application reads from the cache.

DiskCache (python-diskcache) through 5.6.3 uses Python pickle for serialization by default. An attacker with write access to the cache directory can achieve arbitrary code execution when a victim application reads from the cache.

Affected: PyPI: diskcache

DiskCache (python-diskcache) through 5.6.3 uses Python pickle for serialization by default. An attacker with write access to the cache directory can achieve arbitrary code execution when a victim application reads from the cache.

Affected: PyPI: diskcache

DiskCache (python-diskcache) through 5.6.3 uses Python pickle for serialization by default. An attacker with write access to the cache directory can achieve arbitrary code execution when a victim application reads from the cache.

fastmcp: FastMCP: Improper token issuance due to incorrect resource parameter handling python-diskcache: python-diskcache: Arbitrary code execution via insecure pickle deserialization fastmcp: FastMCP: Authenticated Server-Side Request Forgery via path traversal in OpenAPI path parameters urllib3: urllib3: Information disclosure via cross-origin redirects forwarding sensitive headers urllib3: urllib3: Denial of Service due to excessive HTTP response decompression python-pyjwt: PyJWT: Authentication bypass due to forged JSON Web Tokens

Affected: Ubuntu:22.04:LTS: diskcache, Ubuntu:24.04:LTS: diskcache, Ubuntu:25.10: diskcache, Ubuntu:26.04:LTS: diskcache

DiskCache (python-diskcache) through 5.6.3 uses Python pickle for serialization by default. An attacker with write access to the cache directory can achieve arbitrary code execution when a victim application reads from the cache.