CVE-2025-70560
2 advisories.
PyPI/boltz CVE-2025-70560: high 8.4, EPSS 0.17%
Boltz contains an insecure deserialization vulnerability in its molecule loading functionality
Action: No fix published. Pin and monitor.
Affected
| introduced | fixed | last affected |
|---|---|---|
| 0 | - | 2.0.0 |
Fixed versions
No fixed version in the source.
Sources
- osv: GHSA-fjm6-8xp2-4fwc
- https://nvd.nist.gov/vuln/detail/CVE-2025-70560
- https://github.com/jwohlwend/boltz/issues/600
- https://github.com/jwohlwend/boltz
- https://github.com/jwohlwend/boltz/blob/cb04aeccdd480fd4db707f0bbafde538397fa2ac/src/boltz/data/mol.py#L80
CVE-2025-70560 · published · modified · JSON
PyPI/boltz CVE-2025-70560: high 8.4, EPSS 0.17%
Boltz contains an insecure deserialization vulnerability in its molecule loading functionality
Action: No fix published. Pin and monitor.
Affected
| introduced | fixed | last affected |
|---|---|---|
| 0 | - | 2.0.0 |
Fixed versions
No fixed version in the source.
Sources
- osv: PYSEC-2026-1224
- https://nvd.nist.gov/vuln/detail/CVE-2025-70560
- https://github.com/jwohlwend/boltz/issues/600
- https://github.com/jwohlwend/boltz
- https://github.com/jwohlwend/boltz/blob/cb04aeccdd480fd4db707f0bbafde538397fa2ac/src/boltz/data/mol.py#L80
- https://pypi.org/project/boltz
- https://github.com/advisories/GHSA-fjm6-8xp2-4fwc
CVE-2025-70560 · published · modified · JSON