repository icon
uqfoundation / dill Project repository

serialize all of Python

Submit a report

FIRST INTERACTION

WITHIN51 DAYS

REVIEW

WITHIN51 DAYS

FIX

WITHINN/A DAYS

A publicly available export function exists for code execution
carnival-z
informative
Critical
An unverified deserialized data stream of function trust was found in dill pro...
carnival-z
informative
High
Code Execution via Unvalidated Deserialization in Python's pickle Module
sachin141
informative
High
Dynamic Attribute Access and Code Execution in Python Functions
sachin141
not applicable
Remote Code Execution (RCE) in dill
ready-research
self closed