deepdiff vulnerabilities

2 known vulnerabilities in deepdiff from Seperman. 2 are rated high or critical. Each entry lists the affected versions and the release that fixes it, where the vendor has published one.

Latest first

• 7.5 High severity

  deepdiff: Allocation of Resources Without Limits or Throttling

  CVE-2026-33155Mar 20, 2026Seperman

  DeepDiff is a project focused on Deep Difference and search of any Python data. From version 5.0.0 to before version 8.6.2, the pickle unpickler _RestrictedUnpickler validates which classes can be loaded but does not limit their constructor arguments. A few of

• 10.0 Critical severity

  deepdiff: Improperly Controlled Modification of Dynamically-Determined Object Attributes

  CVE-2025-58367Sep 5, 2025SepermanEPSS 1.2%

  DeepDiff is a project focused on Deep Difference and search of any Python data. Versions 5.0.0 through 8.6.0 are vulnerable to class pollution via the Delta class constructor, and when combined with a gadget available in DeltaDiff, it can lead to Denial of Ser