GHSA-w8v5-vhqr-4h9vMedium
DiskCache has unsafe pickle deserialization
🔗 CVE IDs covered (1)
📋 Description
DiskCache (python-diskcache) through 5.6.3 uses Python pickle for serialization by default. An attacker with write access to the cache directory can achieve arbitrary code execution when a victim application reads from the cache.
🎯 Affected products1
- pip/diskcache:<= 5.6.3