Open actionable advisories and recorded vendor fixes. This public package view has no inventory attached and cannot establish whether your deployment is affected. A vendor fix never resolves your finding; verify your installed version and the source guidance.
Open advisories
2 actionable advisories, newest first. Withdrawn advisories and news are excluded. Coverage is partial.
The pickle unpickler RestrictedUnpickler validates which classes can be loaded but does not limit their constructor arguments. A few of the types in SAFETOIMPORT have constructors that allocate memory proportional to their input (builtins.bytes, builtins.list, builtins.range). A 40-byte pickle payload can force 10+ GB of memory, which crashes applications that load delta objects or call pickleload with untrusted data. Details CVE-2025-58367 hardened the delta class against pollution and remote code execution by converting SAFETOIMPORT to a frozenset and blocking traversal. RestrictedUnpickler.findclass only gates which classes can be loaded. It doesn't intercept REDUCE opcodes or validate what is passed to constructors. It can be exploited in 2 ways. 1 - During pickleload A pickle that calls bytes(N) using opcodes permitted by the allowlist. The allocation happens during deserialization and before the delta processes anything. The restricted unpickler does not override…
Recommended action: Upgrade to 8.6.2 or later, then redeploy and verify.A vendor fix does not resolve your finding until you verify it in your own systems.
Python class pollution is a novel vulnerability categorized under CWE-915. The `Delta` class is vulnerable to class pollution via its constructor, and when combined with a gadget available in DeltaDiff itself, it can lead to Denial of Service and Remote Code Execution (via insecure Pickle deserialization). The gadget available in DeepDiff allows `deepdiff.serialization.SAFE_TO_IMPORT` to be modified to allow dangerous classes such as `posix.system`, and then perform insecure Pickle deserialization via the Delta class. This potentially allows any Python code to be executed, given that the input to `Delta` is user-controlled. Depending on the application where DeepDiff is used, this can also lead to other vulnerabilities. For example, in a web application, it might be possible to bypass authentication via class…
Recommended action: Upgrade to 8.6.1 or later, then redeploy and verify.A vendor fix does not resolve your finding until you verify it in your own systems.