https://cve.radiocsirt.org Contains only the most 10 recent entries. http://www.rssboard.org/rss-specification python-feedgen en Fri, 02 Oct 2026 13:24:09 +0000 https://cve.radiocsirt.org/vuln/brew-fdroidserver-cve-2019-12760 <p><strong>Affected:</strong> Homebrew: fdroidserver</p> <p>** DISPUTED ** A deserialization vulnerability exists in the way parso through 0.4.0 handles grammar parsing from the cache. Cache loading relies on pickle and, provided that an evil pickle can be written to a cache grammar file and that its parsing can be triggered, this flaw leads to Arbitrary Code Execution. NOTE: This is disputed because &#34;the cache directory is not under control of the attacker in any common configuration.&#34;</p> <p><strong>Affected:</strong> Homebrew: fdroidserver</p> <p>** DISPUTED ** A deserialization vulnerability exists in the way parso through 0.4.0 handles grammar parsing from the cache. Cache loading relies on pickle and, provided that an evil pickle can be written to a cache grammar file and that its parsing can be triggered, this flaw leads to Arbitrary Code Execution. NOTE: This is disputed because &#34;the cache directory is not under control of the attacker in any common configuration.&#34;</p> https://cve.radiocsirt.org/vuln/brew-fdroidserver-cve-2019-12760 https://cve.radiocsirt.org/vuln/cve-2019-12760 <p>A deserialization vulnerability exists in the way parso through 0.4.0 handles grammar parsing from the cache. Cache loading relies on pickle and, provided that an evil pickle can be written to a cache grammar file and that its parsing can be triggered, this flaw leads to Arbitrary Code Execution. NOTE: This is disputed because &#34;the cache directory is not under control of the attacker in any common configuration.</p> <p>A deserialization vulnerability exists in the way parso through 0.4.0 handles grammar parsing from the cache. Cache loading relies on pickle and, provided that an evil pickle can be written to a cache grammar file and that its parsing can be triggered, this flaw leads to Arbitrary Code Execution. NOTE: This is disputed because &#34;the cache directory is not under control of the attacker in any common configuration.</p> https://cve.radiocsirt.org/vuln/cve-2019-12760 https://cve.radiocsirt.org/vuln/ghsa-22mf-97vh-x8rw <p><strong>Withdrawn by the publisher.</strong></p> <p><strong>Affected:</strong> PyPI: parso</p> <p>** DISPUTED ** A deserialization vulnerability exists in the way parso through 0.4.0 handles grammar parsing from the cache. Cache loading relies on pickle and, provided that an evil pickle can be written to a cache grammar file and that its parsing can be triggered, this flaw leads to Arbitrary Code Execution. NOTE: This is disputed because &#34;the cache directory is not under control of the attacker in any common configuration.&#34;</p> <p><strong>Withdrawn by the publisher.</strong></p> <p><strong>Affected:</strong> PyPI: parso</p> <p>** DISPUTED ** A deserialization vulnerability exists in the way parso through 0.4.0 handles grammar parsing from the cache. Cache loading relies on pickle and, provided that an evil pickle can be written to a cache grammar file and that its parsing can be triggered, this flaw leads to Arbitrary Code Execution. NOTE: This is disputed because &#34;the cache directory is not under control of the attacker in any common configuration.&#34;</p> https://cve.radiocsirt.org/vuln/ghsa-22mf-97vh-x8rw