Upsonic
Monthly
Deserialization vulnerability in Upsonic up to 0.55.6 allows remote authenticated attackers to execute arbitrary code via the Pickle Handler in /tools/add_tool. Public exploit code exists, but no active exploitation has been confirmed. EPSS score is low (0.07%), indicating limited exploitation likelihood.
Path traversal vulnerability in Upsonic up to 0.55.6 allows attackers to read arbitrary files via the file.filename parameter in markdown/server.py. Public exploit code is available, and a patch has been released. The CVSS 4.0 score is 2.0 (low), but the EPSS score of 0.18% suggests low exploitation likelihood.
Deserialization vulnerability in Upsonic up to 0.55.6 allows remote authenticated attackers to execute arbitrary code via the Pickle Handler in /tools/add_tool. Public exploit code exists, but no active exploitation has been confirmed. EPSS score is low (0.07%), indicating limited exploitation likelihood.
Path traversal vulnerability in Upsonic up to 0.55.6 allows attackers to read arbitrary files via the file.filename parameter in markdown/server.py. Public exploit code is available, and a patch has been released. The CVSS 4.0 score is 2.0 (low), but the EPSS score of 0.18% suggests low exploitation likelihood.