CVE-2025-61765 | miguelgrinberg python-socketio up to 5.13.x pickle.loads deserialization (GHSA-g8c6-8fjj-2r4m)

October 6, 2025 Yanac

A vulnerability categorized as problematic has been discovered in miguelgrinberg python-socketio up to 5.13.x. This vulnerability affects the function pickle.loads. Executing manipulation can lead to deserialization.

This vulnerability is handled as CVE-2025-61765. The attack can only be done within the local network. There is not any exploit available.

It is advisable to upgrade the affected component.VulDB Recent EntriesRead More