Threats tagged 'brew-sceptre-cve-2025-58367'

CVE-2025-58367 is a critical vulnerability in the DeepDiff Python library's Delta class that allows class pollution via its constructor. This flaw can be exploited to modify the internal allow list for safe deserialization, enabling insecure Pickle deserialization and potentially leading to remote code execution. The vulnerability also enables denial of service by corrupting built-in classes. A patch is available in version 4.5.3_4.