Jsonpickle Project

Records1All Threatist records

Exploited (KEV)0None in CISA KEV

CVSS critical1CVSS 9.0–10.0

CVSS high0CVSS 7.0–8.9

Exploited now

Jsonpickle Project records in CISA KEV

No Jsonpickle Project vulnerabilities are listed in CISA KEV.

Products in the NVD configurations · select one to filter the records

1 record in Jsonpickle · all components

TI-2020-14267 CVE-2020-22083 · GHSA-j66q-qmrc-89rx

MEDIUM 52

jsonpickle through 1.4.1 allows remote code execution during deserialization of a malicious payload through the decode() function.

CVSS 3.1CRITICAL 9.8 Network No auth No interaction EPSS 0.06619 Published 2020-12-17 No fix listed CWE-502