This vulnerability in pytries datrie (<=0.8.3) involves unsafe deserialization in the Trie.load, Trie.read, and Trie.__setstate__ functions within the trie file handler component. An attacker can remotely trigger deserialization, potentially leading to security issues. The vulnerability is publicly known and exploitable, but no official fix or vendor response has been provided as of the publication date.

The vulnerability allows remote attackers to manipulate deserialization processes in pytries datrie, which could lead to security risks such as code execution or data corruption depending on the deserialized content. The CVSS score of 5.3 indicates a medium impact with low complexity and no privileges required. However, the exact impact depends on how the affected functions are used in the environment.

Patch status is not yet confirmed — check the vendor advisory for current remediation guidance. Since the vendor has not responded or issued a fix, users should consider avoiding use of affected versions (0.8.0 through 0.8.3) or apply additional controls to restrict untrusted input to the vulnerable functions. Monitor official pytries channels for updates or patches.