{"action":"Upgrade pypickle to 2.0.0 or later.","affected":[{"fixed":"2.0.0","introduced":"0"}],"component":"pypickle","cve_ids":["CVE-2025-5174"],"ecosystem":"PyPI","epss":0.00337,"exploited":false,"fixed_versions":["2.0.0"],"ghsa_id":"GHSA-5qwj-342r-h886","id":"tcs_01M5KF1KNRS2MYQXSVK3A4DXA3","modified_at":"2025-06-04T21:29:09.540972Z","published_at":"2025-05-26T09:30:45Z","references":["https://osv.dev/vulnerability/GHSA-5qwj-342r-h886","https://nvd.nist.gov/vuln/detail/CVE-2025-5174","https://github.com/erdogant/pypickle/issues/2","https://github.com/erdogant/pypickle/issues/2#issuecomment-2889146579","https://github.com/erdogant/pypickle/commit/14b4cae704a0bb4eb6723e238f25382d847a1917","https://github.com/erdogant/pypickle","https://github.com/erdogant/pypickle/releases/tag/2.0.0","https://github.com/pypa/advisory-database/tree/main/vulns/pypickle/PYSEC-2025-45.yaml","https://vuldb.com/?ctiid.310262","https://vuldb.com/?id.310262","https://vuldb.com/?submit.579157"],"severity":{"label":"medium","score":5.3},"sources":[{"source":"osv","source_id":"GHSA-5qwj-342r-h886","url":"https://osv.dev/vulnerability/GHSA-5qwj-342r-h886"}],"summary":"pypickle unsafe deserialization vulnerability"}