CVE-2025-62373
2 advisories.
PyPI/pipecat-ai CVE-2025-62373: critical 9.8
Pipecat: Remote Code Execution by Pickle Deserialization Through LivekitFrameSerializer
Action: Upgrade pipecat-ai to 0.0.94 or later.
pip install pipecat-ai==0.0.94Affected
| introduced | fixed | last affected |
|---|---|---|
| 0.0.41 | 0.0.94 | - |
Fixed versions
| 0.0.94 |
Sources
- osv: GHSA-c2jg-5cp7-6wc7
- https://github.com/pipecat-ai/pipecat/security/advisories/GHSA-c2jg-5cp7-6wc7
- https://nvd.nist.gov/vuln/detail/CVE-2025-62373
- https://github.com/pipecat-ai/pipecat
- https://github.com/pipecat-ai/pipecat/releases/tag/v0.0.94
CVE-2025-62373 · published · modified · JSON
PyPI/pipecat-ai CVE-2025-62373: critical 9.8
Pipecat: Remote Code Execution by Pickle Deserialization Through LivekitFrameSerializer
Action: Upgrade pipecat-ai to 0.0.94 or later.
pip install pipecat-ai==0.0.94Affected
| introduced | fixed | last affected |
|---|---|---|
| 0.0.41 | 0.0.94 | - |
Fixed versions
| 0.0.94 |
Sources
- osv: PYSEC-2026-458
- https://github.com/pipecat-ai/pipecat/security/advisories/GHSA-c2jg-5cp7-6wc7
- https://nvd.nist.gov/vuln/detail/CVE-2025-62373
- https://github.com/pipecat-ai/pipecat
- https://github.com/pipecat-ai/pipecat/releases/tag/v0.0.94
- https://pypi.org/project/pipecat-ai
- https://github.com/advisories/GHSA-c2jg-5cp7-6wc7
CVE-2025-62373 · published · modified · JSON