https://cve.radiocsirt.org Contains only the most 10 recent entries. http://www.rssboard.org/rss-specification python-feedgen en Mon, 19 Oct 2026 17:09:25 +0000 https://cve.radiocsirt.org/vuln/euvd-2026-268846 EUVD-2026-268846 https://cve.radiocsirt.org/vuln/euvd-2026-268846 https://cve.radiocsirt.org/vuln/fkie_cve-2025-70560 <p>Boltz 2.0.0 contains an insecure deserialization vulnerability in its molecule loading functionality. The application uses Python pickle to deserialize molecule data files without validation. An attacker with the ability to place a malicious pickle file in a directory processed by boltz can achieve arbitrary code execution when the file is loaded.</p> <p>Boltz 2.0.0 contains an insecure deserialization vulnerability in its molecule loading functionality. The application uses Python pickle to deserialize molecule data files without validation. An attacker with the ability to place a malicious pickle file in a directory processed by boltz can achieve arbitrary code execution when the file is loaded.</p> https://cve.radiocsirt.org/vuln/fkie_cve-2025-70560 https://cve.radiocsirt.org/vuln/ghsa-fjm6-8xp2-4fwc <p><strong>Affected:</strong> PyPI: boltz</p> <p>Boltz 2.0.0 contains an insecure deserialization vulnerability in its molecule loading functionality. The application uses Python pickle to deserialize molecule data files without validation. An attacker with the ability to place a malicious pickle file in a directory processed by boltz can achieve arbitrary code execution when the file is loaded.</p> <p><strong>Affected:</strong> PyPI: boltz</p> <p>Boltz 2.0.0 contains an insecure deserialization vulnerability in its molecule loading functionality. The application uses Python pickle to deserialize molecule data files without validation. An attacker with the ability to place a malicious pickle file in a directory processed by boltz can achieve arbitrary code execution when the file is loaded.</p> https://cve.radiocsirt.org/vuln/ghsa-fjm6-8xp2-4fwc https://cve.radiocsirt.org/vuln/pysec-2026-1224 <p><strong>Affected:</strong> PyPI: boltz</p> <p>Boltz 2.0.0 contains an insecure deserialization vulnerability in its molecule loading functionality. The application uses Python pickle to deserialize molecule data files without validation. An attacker with the ability to place a malicious pickle file in a directory processed by boltz can achieve arbitrary code execution when the file is loaded.</p> <p><strong>Affected:</strong> PyPI: boltz</p> <p>Boltz 2.0.0 contains an insecure deserialization vulnerability in its molecule loading functionality. The application uses Python pickle to deserialize molecule data files without validation. An attacker with the ability to place a malicious pickle file in a directory processed by boltz can achieve arbitrary code execution when the file is loaded.</p> https://cve.radiocsirt.org/vuln/pysec-2026-1224