Insecure deserialization.

TYPO3 CMS Allows Insecure Deserialization via Mailer File Spool

• Insecure deserialization

>=10.0.0, <10.4.55 || >=11.0.0, <11.5.49 || >=12.0.0, <12.4.41 || >=13.0.0, <13.4.23 || >=14.0.0, <14.0.2 · fixed in 10.4.55, 11.5.49, 12.4.41, 13.4.23, 14.0.2

Azure Core is vulnerable to deserialization of untrusted data

• Insecure deserialization

<1.38.0 · fixed in 1.38.0

UmbracoForms Vulnerable to Remote Code Execution via Untrusted WSDL Compilation in Dynamic SOAP Client Generation

• Code injection
• Insecure deserialization

<=8.13.16 · no fixed version yet

Microsoft SharePoint Remote Code Execution Vulnerability

• Microsoft SharePoint Enterprise Server 2016
• Microsoft SharePoint Server 2019
• Insecure deserialization

LlamaIndex (run-llama/llama_index) versions up to and including 0.11.6 contain an unsafe deserialization vulnerability in BGEM3Index.load_from_disk() in llama_index/indices/managed/bge_m3/base.py. ...

• Insecure deserialization

<0.11.7 · fixed in 0.11.7

Spectrum insecure deserialiation

• Broadcom DX NetOps Spectrum
• Insecure deserialization

Fickling vulnerable to detection bypass due to "builtins" blindness

• Insecure deserialization

<0.1.7 · fixed in 0.1.7

Fickling has Static Analysis Bypass via Incomplete Dangerous Module Blocklist

• Insecure deserialization
• CWE-184

<0.1.7 · fixed in 0.1.7

Fickling vulnerable to use of ctypes and pydoc gadget chain to bypass detection

• Insecure deserialization
• CWE-184

<0.1.7 · fixed in 0.1.7

Fickling Blocklist Bypass: cProfile.run()

• Insecure deserialization
• CWE-184

<0.1.7 · fixed in 0.1.7

Fickling has a bypass via runpy.run_path() and runpy.run_module()

• Insecure deserialization
• CWE-184

<0.1.7 · fixed in 0.1.7

vLLM introduced enhanced protection for CVE-2025-62164

• Insecure deserialization
• Memory corruption

>=0.10.2, <0.13.0 · fixed in 0.13.0

WordPress Newsletters plugin <= 4.11 - PHP Object Injection vulnerability

• Tribulant Software Newsletters
• Insecure deserialization

Bio-Formats performs unsafe Java deserialization of attacker-controlled memoization cache files (.bfmemo) during image processing

• Insecure deserialization

<=8.3.0 · no fixed version yet

WordPress DZS Video Gallery plugin <= 12.37 - PHP Object Injection Vulnerability

• Digital zoom studio DZS Video Gallery
• Insecure deserialization

WordPress DZS Video Gallery plugin <= 12.25 - PHP Object Injection vulnerability

• Digital zoom studio DZS Video Gallery
• Insecure deserialization

WordPress Themify Edmin theme <= 2.0.0 - PHP Object Injection Vulnerability

• Themify Edmin
• Insecure deserialization

milvus HTTP Endpoint expr.go expr.Exec deserialization

• milvus
• Insecure deserialization
• CWE-20

PluXml Media Management medias.php __destruct deserialization

• PluXml
• Insecure deserialization
• CWE-20

Feast vulnerable to Deserialization of Untrusted Data

• Insecure deserialization

<0.54.0 · fixed in 0.54.0

TYPO3-EXT-SA-2026-014: Remote Code Execution in extension "HTML5 Video Player vs. Powermail" (html5videoplayer_powermail)

• Insecure deserialization

<=0.2.1 · no fixed version yet

FontForge SFD File Parsing Deserialization of Untrusted Data Remote Code Execution Vulnerability

• FontForge
• Insecure deserialization

EyouCMS arcpagelist Ajax.php unserialize deserialization

• EyouCMS
• Insecure deserialization
• CWE-20

Picklescan is vulnerable to RCE via missing detection when calling built-in python _operator.attrgetter

• Code injection
• Insecure deserialization

<0.0.34 · fixed in 0.0.34

Picklescan is vulnerable to RCE via missing detection when calling built-in python _operator.methodcaller

• Code injection
• Insecure deserialization

<0.0.34 · fixed in 0.0.34

Picklescan is vulnerable to RCE through missing detection when calling numpy.f2py.crackfortran._eval_length

• Code injection
• Insecure deserialization

<0.0.33 · fixed in 0.0.33

Picklescan is vulnerable to RCE via missing detection when calling numpy.f2py.crackfortran.getlincoef

• Code injection
• Insecure deserialization

<0.0.33 · fixed in 0.0.33

aizuda snail-job API FurySerializer.deserialize deserialization

• aizuda snail-job
• Insecure deserialization
• CWE-20

Dromara Sa-Token SaSerializerTemplateForJdkUseBase64.java ObjectInputStream.readObject deserialization

• Dromara Sa-Token
• Insecure deserialization
• CWE-20

Picklescan is vulnerable to RCE via missing detection when calling numpy.f2py.crackfortran.param_eval

• Code injection
• Insecure deserialization

<0.0.33 · fixed in 0.0.33

Picklescan is vulnerable to RCE through missing detection when calling numpy.f2py.crackfortran.myeval

• Code injection
• Insecure deserialization

<0.0.33 · fixed in 0.0.33

Picklescan is vulnerable to RCE through missing detection when calling built-in python operator.methodcaller

• Code injection
• Insecure deserialization

<0.0.33 · fixed in 0.0.33

Picklescan missing detection when calling numpy.f2py.crackfortran.getlincoef

• Insecure deserialization

<0.0.33 · fixed in 0.0.33

Picklescan missing detection when calling pty.spawn

• Insecure deserialization

<0.0.33 · fixed in 0.0.33

Picklescan vulnerable to Arbitrary File Writing

• Insecure deserialization
• Information disclosure

<0.0.33 · fixed in 0.0.33

Dromara Sa-Token SaJdkSerializer.java ObjectInputStream.readObject deserialization

• Dromara Sa-Token
• Insecure deserialization
• CWE-20

lmdeploy vulnerable to Arbitrary Code Execution via Insecure Deserialization in torch.load()

• Insecure deserialization

<0.11.1 · fixed in 0.11.1

WordPress Icegram Express Pro plugin < 5.9.14 - PHP Object Injection vulnerability

• Icegram Express Pro
• Insecure deserialization

Tencent FaceDetection-DSFD resnet Deserialization of Untrusted Data Remote Code Execution Vulnerability

• Tencent FaceDetection-DSFD
• Insecure deserialization

Tencent TFace restore_checkpoint Deserialization of Untrusted Data Remote Code Execution Vulnerability

• Tencent TFace
• Insecure deserialization

Tencent TFace eval Deserialization of Untrusted Data Remote Code Execution Vulnerability

• Tencent TFace
• Insecure deserialization

Tencent PatrickStar merge_checkpoint Deserialization of Untrusted Data Remote Code Execution Vulnerability

• Tencent PatrickStar
• Insecure deserialization

Tencent NeuralNLP-NeuralClassifier _load_checkpoint Deserialization of Untrusted Data Remote Code Execution Vulnerability

• Tencent NeuralNLP-NeuralClassifier
• Insecure deserialization

Tencent MimicMotion create_pipeline Deserialization of Untrusted Data Remote Code Execution Vulnerability

• Tencent MimicMotion
• Insecure deserialization

Tencent MedicalNet generate_model Deserialization of Untrusted Data Remote Code Execution Vulnerability

• Tencent MedicalNet
• Insecure deserialization

Tencent HunyuanVideo load_vae Deserialization of Untrusted Data Remote Code Execution Vulnerability

• Tencent HunyuanVideo
• Insecure deserialization

Tencent HunyuanDiT model_resume Deserialization of Untrusted Data Remote Code Execution Vulnerability

• Tencent HunyuanDiT
• Insecure deserialization

Tencent HunyuanDiT merge Deserialization of Untrusted Data Remote Code Execution Vulnerability

• Tencent HunyuanDiT
• Insecure deserialization

Tencent Hunyuan3D-1 load_pretrained Deserialization of Untrusted Data Remote Code Execution Vulnerability

• Tencent Hunyuan3D-1
• Insecure deserialization

Hugging Face Transformers GLM4 Deserialization of Untrusted Data Remote Code Execution Vulnerability. This vulnerability allows remote attackers to execute arbitrary code on affected installations ...

• Insecure deserialization

<=4.57.1 · no fixed version yet

Hugging Face Transformers X-CLIP Checkpoint Conversion Deserialization of Untrusted Data Remote Code Execution Vulnerability. This vulnerability allows remote attackers to execute arbitrary code on...

• Insecure deserialization

<=5.0.0-rc0 · no fixed version yet

Hugging Face Transformers megatron_gpt2 Deserialization of Untrusted Data Remote Code Execution Vulnerability. This vulnerability allows remote attackers to execute arbitrary code on affected insta...

• Insecure deserialization

<=4.55.0 · no fixed version yet

Hugging Face Transformers Transformer-XL Model Deserialization of Untrusted Data Remote Code Execution Vulnerability. This vulnerability allows remote attackers to execute arbitrary code on affecte...

• Insecure deserialization

<=4.54.1 · no fixed version yet

Hugging Face Transformers Perceiver Model Deserialization of Untrusted Data Remote Code Execution Vulnerability. This vulnerability allows remote attackers to execute arbitrary code on affected ins...

• Insecure deserialization

<=4.54.1 · no fixed version yet

Hugging Face Accelerate Deserialization of Untrusted Data Remote Code Execution Vulnerability

• Hugging Face Accelerate
• Insecure deserialization

Hugging Face Diffusers CogView4 Deserialization of Untrusted Data Remote Code Execution Vulnerability

• Hugging Face Diffusers
• Insecure deserialization

LangChain serialization injection vulnerability enables secret extraction

• Insecure deserialization

<0.3.37 || >=1.0.0, <1.2.3 · fixed in 0.3.37, 1.2.3

LangChain serialization injection vulnerability enables secret extraction in dumps/loads APIs

• Insecure deserialization

<0.3.81 || >=1.0.0, <1.2.5 · fixed in 0.3.81, 1.2.5

Live Composer – Free WordPress Website Builder <= 2.0.2 - Authenticated (Contributor+) PHP Object Injection via dslc_module_posts_output Shortcode

• livecomposer Live Composer – Free WordPress Website Builder
• Insecure deserialization

Keycloak LDAP User Federation provider enables admin-triggered untrusted Java deserialization

• Insecure deserialization

>=26.3.0, <26.4.6 || <26.2.11 · fixed in 26.4.6, 26.2.11