Vulnerabilities
Python Pickle Deserialization: How It Breaks and How to Fix It
Python pickle modules execute arbitrary code when they deserialize data, turning any untrusted input stream into a remote execution vector for attackers.
deserialization
Everything Vector Update has reported about deserialization: 2 stories, newest first. Part of our Vulnerabilities coverage.
Vulnerabilities
Fix Edema Plugin Immediately: Critical CVE-2026-93941 Object Injection Risk in Versions Up to 1.2.2.2
A critical vulnerability in ThemeREX Edema versions up to 1.2.2.2 allows object injection via untrusted data deserialization, requiring immediate action.