p PatchFirst

CVE-2025-63675

CVE-2025-63675

This page contains facts from public vulnerability sources. Check the original advisory before updating.

cryptidy through 1.2.4 allows code execution via untrusted data because pickle.loads is used. This occurs in aes_decrypt_message in symmetric_encryption.py.

CVSS 6.9 · Medium · EPSS 0.3%

Published
Updated

Stack: python

Affected products and versions

  • cryptidy

    Versions
    • ≥ 0, ≤ 1.2.4: Affected (semver)

    No fix published

  • cryptidy PyPI

    Versions
    • 1.0.5
    • 1.0.7
    • 1.1.0
    • 1.2.0
    • 1.2.1
    • 1.2.2
    • 1.2.3
    • 1.2.4
    Affected ranges
    • ECOSYSTEM: ≤ 1.2.4

    No fix published

Original sources

Check your server →