PyPI/pypickle CVE-2025-5175: medium 5.3, EPSS 0.25%

pypickle Incorrect Privilege Assignment vulnerability

Action: Upgrade pypickle to 2.0.0 or later.

pip install pypickle==2.0.0

Affected

Fixed versions

Sources

• osv: GHSA-qpxx-2cwh-r5vh
• https://nvd.nist.gov/vuln/detail/CVE-2025-5175
• https://github.com/erdogant/pypickle/issues/3
• https://github.com/erdogant/pypickle/issues/3#issue-3070689116
• https://github.com/erdogant/pypickle/issues/3#issuecomment-2888589652
• https://github.com/erdogant/pypickle/commit/14b4cae704a0bb4eb6723e238f25382d847a1917
• https://github.com/PrinceRaj-0/Vulnerability-Disclosure/blob/main/CVE-2025-5175.md
• https://github.com/erdogant/pypickle
• https://github.com/erdogant/pypickle/releases/tag/2.0.0
• https://github.com/pypa/advisory-database/tree/main/vulns/pypickle/PYSEC-2025-46.yaml
• https://vuldb.com/?ctiid.310263
• https://vuldb.com/?id.310263
• https://vuldb.com/?submit.579824

CVE-2025-5175 · published 2025-05-26T09:30:45Z · modified 2025-06-04T21:30:00.468821Z · JSON