CyberSecBulletin

Marsupialtail vulnerabilities

We track 1 vulnerability in Marsupialtail products. 1 is rated high or critical, and none are known to be exploited. The most recent was published on October 17, 2025.

1vulnerabilities
1critical
0high
0exploited
9.8average CVSS score

Latest Marsupialtail vulnerabilities

  • 9.8 Critical severity

    quokka: Deserialization of Untrusted Data

    CVE-2025-62515Marsupialtail

    pyquokka is a framework for making data lakes work for time series. In versions 0.3.1 and prior, the FlightServer class directly uses pickle.loads() to deserialize action bodies received from Flight clients without any sanitization or validation in the do_acti