fugue vulnerabilities

1 known vulnerability in fugue from Fugue-project. 1 is rated high or critical. Each entry lists the affected versions and the release that fixes it, where the vendor has published one.

Latest first

• 8.8 High severity

  fugue: Deserialization of Untrusted Data

  CVE-2025-62703Nov 25, 2025Fugue-project

  Fugue is a unified interface for distributed computing that lets users execute Python, Pandas, and SQL code on Spark, Dask, and Ray with minimal rewrites. In version 0.9.2 and prior, there is a remote code execution vulnerability by pickle deserialization via