Read the docs

Vulnerabilities

Filters

Reset all
Threatist priority
Signals
Fix status
Impact type
Attack vector
Requirements
Product

Products as named in CPE, with their records.

Published
Weakness (CWE)
1 selected

3 records

Vendor: Upsonic Clear all filters
TI-2026-00556 CVE-2026-0773 · GHSA-8rrj-mw9c-258v

Deserialization of untrusted data in Upsonic

Priority MEDIUM 52

Upsonic Cloudpickle Deserialization of Untrusted Data Remote Code Execution Vulnerability.

CVSS 3.0CRITICAL 9.8 Network No auth No interaction EPSS 0.01438 Published 2026-01-23 No fix listed CWE-502
TI-2025-05681 CVE-2025-6279 · GHSA-rpfv-46xj-5984

Upsonic Pickle add_tool cloudpickle.loads deserialization

Priority MEDIUM 56

A vulnerability, which was classified as critical, has been found in Upsonic up to 0.55.6.

CVSS 4.0MEDIUM 5.1 Adjacent network Low privileges No interaction EPSS 0.00508 Published 2025-06-19 Fixed in 0.56.0 CWE-20
TI-2025-05680 CVE-2025-6278 · GHSA-8jf4-fcjr-68c2

Upsonic server.py os.path.join path traversal

Priority MEDIUM 56

A vulnerability classified as critical was found in Upsonic up to 0.55.6.

CVSS 4.0MEDIUM 5.1 Adjacent network Low privileges No interaction EPSS 0.00702 Published 2025-06-19 Fixed in 0.56.0 CWE-22