Insecure deserialization.

TYPO3 Remote Code Execution in extension "Site Crawler" (crawler)

• Insecure deserialization

<11.0.13 || >=12.0.0, <12.0.11 · fixed in 11.0.13, 12.0.11

TYPO3 Remote Code Execution in extension "Content Element Selector" (ceselector)

• Insecure deserialization

<3.0.3 || >=4.0.0, <4.0.2 || >=5.0.0, <5.0.1 || >=6.0.0, <6.0.1 · fixed in 3.0.3, 4.0.2, 5.0.1, 6.0.1

AutoGPT Platform: Remote Code Execution via Unsafe Pickle Deserialization of Redis Cache Entries

• Significant-Gravitas AutoGPT
• Code injection
• Insecure deserialization

Free PBX backup: Deserialization of Untrusted Data in admin/modules/backup/Models/BackupSplFileInfo.php

• FreePBX security-reporting
• Insecure deserialization

ChromaDB Python project has a pre-authentication code injection vulnerability

• Code injection
• Insecure deserialization

>=1.0.0, <=1.5.9 · no fixed version yet

Graphite Has a Pickle Deserialization Vulnerability

• Insecure deserialization

<0.2 · fixed in 0.2

h2oai h2o-3 JAR Model.java importBinaryModel deserialization

• h2oai h2o-3
• Insecure deserialization
• CWE-20

Oinone Pamirs appConfigQuery PamirsParserConfig.java JsonUtils.parseMap deserialization

• Oinone Pamirs
• Insecure deserialization
• CWE-20

python jsonpickle 2.0.0 Remote Code Execution via py/repr

• python jsonpickle
• Code injection
• Insecure deserialization

WWW::Mechanize::Cached versions before 2.00 for Perl deserialize cached HTTP responses from a world-writable on-disk cache, enabling local response forgery and code execution

• OALDERS WWW::Mechanize::Cached
• Insecure deserialization
• Broken access control

TanStack Start - Server Core: Inbound server-function request deserialization could invoke a sibling client-referenced server function

• Insecure deserialization
• Memory corruption

<1.167.30 · fixed in 1.167.30

DataHub OIDC REDIRECT_URL Cookie Deserialization Vulnerability

• datahub
• Insecure deserialization

Deserialization of Untrusted Data in GitLab

• GitLab
• Insecure deserialization

LangSmith SDK: Public prompt pull deserializes untrusted manifests without trust boundary warning

• Insecure deserialization

<0.6.0 · fixed in 0.6.0

BIG-IP and BIG-IQ Configuration utility vulnerability

• F5 BIG-IP
• F5 BIG-IQ
• Insecure deserialization

coreActivity: Activity Logging for WordPress <= 3.0 - Unauthenticated PHP Object Injection via 'user_agent' Log Meta Field

• gdragon coreActivity: Activity Logging for WordPress
• Insecure deserialization

Adobe Connect | Deserialization of Untrusted Data (CWE-502)

• Adobe Connect
• Adobe Connect Desktop Application
• Insecure deserialization

imgaug contains an insecure deserialization vulnerability in BackgroundAugmenter class within multicore.py module

• Insecure deserialization

<=0.4.0 · no fixed version yet

Horovod contains an insecure deserialization vulnerability in its KVStore HTTP server component

• Insecure deserialization

<=0.28.1 · no fixed version yet

Snorkel MultitaskClassifier.load uses an unsafe torch.load

• Insecure deserialization

<=0.10.0 · no fixed version yet

Snorkel BaseLabeler.load uses an unsafe pickle.load

• Insecure deserialization

<=0.10.0 · no fixed version yet

Snorkel Trainer.load uses an unsafe torch.load

• Insecure deserialization

<=0.10.0 · no fixed version yet

PyTorch Lightning load_from_checkpoint has an insecure checkpoint deserialization

• Insecure deserialization

<=2.6.0 · no fixed version yet

Microsoft SharePoint Server Remote Code Execution Vulnerability

• Microsoft SharePoint Enterprise Server 2016
• Microsoft SharePoint Server 2019
• Insecure deserialization

Microsoft SharePoint Server Remote Code Execution Vulnerability

• Microsoft SharePoint Enterprise Server 2016
• Microsoft SharePoint Server 2019
• Insecure deserialization

Microsoft SharePoint Server Remote Code Execution Vulnerability

• Microsoft SharePoint Enterprise Server 2016
• Microsoft SharePoint Server 2019
• Insecure deserialization

Microsoft SharePoint Server Remote Code Execution Vulnerability

• Microsoft SharePoint Enterprise Server 2016
• Microsoft SharePoint Server 2019
• Insecure deserialization

Microsoft SharePoint Server Remote Code Execution Vulnerability

• Microsoft SharePoint Enterprise Server 2016
• Microsoft SharePoint Server 2019
• Insecure deserialization

The CosyVoice project thru commit 6e01309e01bc93bbeb83bdd996b1182a81aaf11e (2025-30-21) contains an insecure deserialization vulnerability (CWE-502) in its model loading process.

• Insecure deserialization

The Adversarial Robustness Toolbox (ART) thru 1.20.1 contains an insecure deserialization vulnerability (CWE-502) in its Kubeflow component's model loading functionality.

• Insecure deserialization

The _load_model() function in the neural_magic_training.py script of the optimate project in commit a6d302f912b481c94370811af6b11402f51d377f (2024-07-21) is vulnerable to insecure deserialization (CW…

• Insecure deserialization

The _load_model() function in the neural_magic_training.py script of the optimate project in commit a6d302f912b481c94370811af6b11402f51d377f (2024-07-21) is vulnerable to insecure deserialization (CW…

• Insecure deserialization

The torch-checkpoint-shrink.py script in the ml-engineering project in commit 0099885db36a8f06556efe1faf552518852cb1e0 (2025-20-27) contains an insecure deserialization vulnerability (CWE-502).

• Insecure deserialization

flash-attention contains an insecure deserialization vulnerability in its checkpoint loading mechanism

• Code injection
• Insecure deserialization

<=2.8.3 · no fixed version yet

pgAdmin 4 has deserialization of untrusted data in its FileBackedSessionManager

• Insecure deserialization

<9.15 · fixed in 9.15

torrentpier has PHP Serialize Injections

• Insecure deserialization

<2.4.4 · fixed in 2.4.4

Nexus Repository 3 - Improper LDAP Referral Handling

• Sonatype Nexus Repository
• Insecure deserialization
• Server-side request forgery (SSRF)

CosyVoice thru commit 6e01309e01bc93bbeb83bdd996b1182a81aaf11e (2025-30-21) contains an insecure deserialization vulnerability (CWE-502) in its average_model.py model averaging tool.

• Insecure deserialization

CosyVoice thru commit 6e01309e01bc93bbeb83bdd996b1182a81aaf11e (2025-30-21) contains an insecure deserialization vulnerability (CWE-502) in its make_parquet_list.py data processing tool.

• Insecure deserialization

LangChain vulnerable to unsafe deserialization of attacker-controlled objects through overly broad `load()` allowlists

• Insecure deserialization

<0.3.85 || >=1.0.0, <1.3.3 · fixed in 0.3.85, 1.3.3

Insecure deserialization

• SEPPmail AG Secure Email Gateway
• Insecure deserialization

User Frontend: AI Powered Frontend Posting, User Directory, Profile, Membership & User Registration <= 4.3.1 - Authenticated (Subscriber+) PHP Object Injection

• wedevs User Frontend: AI Powered Frontend Posting, User Directory, Profile, Membership & User Registration
• Insecure deserialization

Netgate pfSense CE 2.7.2 allows code execution by using the module installer with a backup file with a serialized PHP object containing the post_reboot_commands property.

• Insecure deserialization
• Broken access control

LINQPad before 5.52.01 Pro edition is vulnerable to Unsafe Deserialization in LINQPad.AutoRefManager::PopulateFromCache(), leading to code execution.

• Insecure deserialization

Grav has Insecure Deserialization in File Cache

• Insecure deserialization
• CWE-20

<2.0.0-beta.2 · fixed in 2.0.0-beta.2

Grav has multiple RCE vectors: unsafe unserialize (x3), command injection in git clone, SSTI blocklist bypass

• Command injection
• Insecure deserialization

<2.0.0-beta.2 · fixed in 2.0.0-beta.2

Apache OpenNLP ExtensionLoader Vulnerable to Arbitrary Class Instantiation via Model Manifest

• Code injection
• Insecure deserialization

>=2.0.0, <2.5.9 || >=3.0.0-M1, <3.0.0-M3 || <1.9.5 · fixed in 2.5.9, 3.0.0-M3, 1.9.5

MindsDB Pickle pickle.loads deserialization

• MindsDB
• Insecure deserialization
• CWE-20

Profile Builder Pro <= 3.14.5 - Unauthenticated PHP Object Injection

• Cozmoslabs Profile Builder Pro
• Insecure deserialization

mem0ai mem0 has an Improper Input Validation Issue

• Insecure deserialization
• CWE-20

<2.0.0b2 · fixed in 2.0.0b2

Apache MINA vulnerable to Deserialization of Untrusted Data (CVE-2026-41635 Incomplete Fix)

• Insecure deserialization

>=2.1.0, <2.1.12 || >=2.2.0, <2.2.7 · fixed in 2.1.12, 2.2.7

Apache MINA vulnerable to Deserialization of Untrusted Data (CVE-2026-41409 Incomplete Fix)

• Insecure deserialization

>=2.1.0, <2.1.12 || >=2.2.0, <2.2.7 · fixed in 2.1.12, 2.2.7

Arbitrary Code Execution via Unsafe Deserialization in LabOne Q

• Zurich Instruments LabOne Q
• Insecure deserialization

Unsafe deserialization vulnerability in MixPHP Framework 2.x thru 2.2.17.

• Insecure deserialization

Unsafe deserialization vulnerability in MixPHP Framework 2.x thru 2.2.17.

• Insecure deserialization

Unsafe deserialization vulnerability in MixPHP Framework 2.x thru 2.2.17.

• Insecure deserialization

Unsafe deserialization vulnerability in MixPHP Framework 2.x thru 2.2.17.

• Insecure deserialization

fabric-sdk-java has ObjectInputStream.readObject() without ObjectInputFilter, which allows Java deserialization RCE

• Insecure deserialization

>=1.0.0, <=2.2.26 · no fixed version yet

PhpSpreadsheet has SSRF/RCE in IOFactory::load when $filename is user controlled

• Insecure deserialization
• Server-side request forgery (SSRF)

<1.30.3 || >=2.0.0, <2.1.15 || >=2.2.0, <2.4.4 || >=3.3.0, <3.10.4 || >=4.0.0, <5.6.0 · fixed in 1.30.3, 2.1.15, 2.4.4, 3.10.4, 5.6.0

Jenkins Matrix Authorization Strategy Plugin: Unsafe deserialization allows invocation of parameterless constructors

• Insecure deserialization

>=2.0-beta-1, <3.2.10 · fixed in 3.2.10