CVE-2025-62703
2 advisories.
PyPI/fugue CVE-2025-62703: high 8.8, EPSS 0.73%
Fugue is Vulnerable to Remote Code Execution by Pickle Deserialization via FlaskRPCServer
Action: No fix published. Pin and monitor.
Affected
| introduced | fixed | last affected |
|---|---|---|
| 0 | - | 0.9.2 |
Fixed versions
No fixed version in the source.
Sources
- osv: GHSA-xv5p-fjw5-vrj6
- https://github.com/fugue-project/fugue/security/advisories/GHSA-xv5p-fjw5-vrj6
- https://nvd.nist.gov/vuln/detail/CVE-2025-62703
- https://github.com/fugue-project/fugue/commit/6f25326779fd1f528198098d6287c5a863176fc0
- https://drive.google.com/file/d/1y8bBBp7dnWoT_WHBtdB0Fts4NRUIfdWi/view?usp=sharing
- https://github.com/fugue-project/fugue
CVE-2025-62703 · published · modified · JSON
PyPI/fugue CVE-2025-62703: high 8.8, EPSS 0.73%
Fugue is Vulnerable to Remote Code Execution by Pickle Deserialization via FlaskRPCServer
Action: No fix published. Pin and monitor.
Affected
| introduced | fixed | last affected |
|---|---|---|
| 0 | - | 0.9.2 |
Fixed versions
No fixed version in the source.
Sources
- osv: PYSEC-2026-1399
- https://github.com/fugue-project/fugue/security/advisories/GHSA-xv5p-fjw5-vrj6
- https://nvd.nist.gov/vuln/detail/CVE-2025-62703
- https://github.com/fugue-project/fugue/commit/6f25326779fd1f528198098d6287c5a863176fc0
- https://drive.google.com/file/d/1y8bBBp7dnWoT_WHBtdB0Fts4NRUIfdWi/view?usp=sharing
- https://github.com/fugue-project/fugue
- https://pypi.org/project/fugue
- https://github.com/advisories/GHSA-xv5p-fjw5-vrj6
CVE-2025-62703 · published · modified · JSON