CVE-2026-2970
2 advisories.
PyPI/datapizza-ai-core CVE-2026-2970: medium 4.6, EPSS 1.24%
datapizza-ai has unsafe deserialization via pickle.loads() in RedisCache
Action: No fix published. Pin and monitor.
Affected
| introduced | fixed | last affected |
|---|---|---|
| 0 | - | 0.0.7 |
Fixed versions
No fixed version in the source.
Sources
- osv: GHSA-hg58-x52p-859c
- https://nvd.nist.gov/vuln/detail/CVE-2026-2970
- https://github.com/datapizza-labs/datapizza-ai
- https://github.com/hacktivesec/datapizza-ai-disclosure/blob/main/unsafe-deserialization.md
- https://vuldb.com/?ctiid.347337
- https://vuldb.com/?id.347337
- https://vuldb.com/?submit.755363
CVE-2026-2970 · published · modified · JSON
PyPI/datapizza-ai-core CVE-2026-2970: medium 4.6, EPSS 1.24%
datapizza-ai has unsafe deserialization via pickle.loads() in RedisCache
Action: No fix published. Pin and monitor.
Affected
| introduced | fixed | last affected |
|---|---|---|
| 0 | - | 0.0.7 |
Fixed versions
No fixed version in the source.
Sources
- osv: PYSEC-2026-2438
- https://nvd.nist.gov/vuln/detail/CVE-2026-2970
- https://github.com/datapizza-labs/datapizza-ai
- https://github.com/hacktivesec/datapizza-ai-disclosure/blob/main/unsafe-deserialization.md
- https://vuldb.com/?ctiid.347337
- https://vuldb.com/?id.347337
- https://vuldb.com/?submit.755363
- https://pypi.org/project/datapizza-ai-core
- https://github.com/advisories/GHSA-hg58-x52p-859c
CVE-2026-2970 · published · modified · JSON