Threats tagged 'brew-bbot-cve-2025-58367'

CVE-2025-58367 is a critical vulnerability in the DeepDiff Python library's Delta class that allows class pollution via its constructor. This flaw enables attackers to manipulate the internal allow list for safe deserialization, leading to insecure Pickle deserialization. Exploitation can result in Denial of Service, Remote Code Execution, and potentially other impacts such as authentication bypass in web applications. The vulnerability affects DeepDiff versions from 1.0.5.1665 up to but not including 2.6.1_1. A patch is available in version 2.6.1_1.