Rpc.py vulnerabilities

1 known vulnerability in Rpc.py from Rpc.py Project. 1 is rated high or critical. Each entry lists the affected versions and the release that fixes it, where the vendor has published one.

Latest first

• 9.8 Critical severity

  Rpc.py: Insufficiently Protected Credentials

  CVE-2022-35411Jul 8, 2022Rpc.py ProjectEPSS 46.6%

  rpc.py through 0.6.0 allows Remote Code Execution because an unpickle occurs when the "serializer: pickle" HTTP header is sent. In other words, although JSON (not Pickle) is the default data format, an unauthenticated client can cause the data to be processed