CWE-502
AllowedDeserialization of Untrusted Data
Abstraction: Base · Status: Draft
The product deserializes untrusted data without sufficiently ensuring that the resulting data will be valid.
4835 vulnerabilities reference this CWE, most recent first.
GHSA-G9RC-6MW4-JRQ3
Vulnerability from github – Published: 2022-03-30 00:00 – Updated: 2022-04-05 00:00Insecure deserialization of not validated module file in GitHub repository crater-invoice/crater prior to 6.0.6.
{
"affected": [],
"aliases": [
"CVE-2022-1032"
],
"database_specific": {
"cwe_ids": [
"CWE-502"
],
"github_reviewed": false,
"github_reviewed_at": null,
"nvd_published_at": "2022-03-29T08:15:00Z",
"severity": "HIGH"
},
"details": "Insecure deserialization of not validated module file in GitHub repository crater-invoice/crater prior to 6.0.6.",
"id": "GHSA-g9rc-6mw4-jrq3",
"modified": "2022-04-05T00:00:41Z",
"published": "2022-03-30T00:00:26Z",
"references": [
{
"type": "ADVISORY",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2022-1032"
},
{
"type": "WEB",
"url": "https://github.com/crater-invoice/crater/commit/7cde971f8b79579951df98384a5210d25f698af5"
},
{
"type": "WEB",
"url": "https://huntr.dev/bounties/cb9a0393-be34-4021-a06c-00c7791c7622"
}
],
"schema_version": "1.4.0",
"severity": [
{
"score": "CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H",
"type": "CVSS_V3"
}
]
}
GHSA-GCM4-Q2PG-XW89
Vulnerability from github – Published: 2019-03-25 16:16 – Updated: 2024-09-23 16:03A code injection issue was discovered in ipycache versions up to 0.1.4.
{
"affected": [
{
"package": {
"ecosystem": "PyPI",
"name": "ipycache"
},
"ranges": [
{
"events": [
{
"introduced": "0"
},
{
"last_affected": "0.1.4"
}
],
"type": "ECOSYSTEM"
}
]
}
],
"aliases": [
"CVE-2019-7539"
],
"database_specific": {
"cwe_ids": [
"CWE-502",
"CWE-94"
],
"github_reviewed": true,
"github_reviewed_at": "2020-06-16T21:36:49Z",
"nvd_published_at": "2019-03-21T21:29:00Z",
"severity": "CRITICAL"
},
"details": "A code injection issue was discovered in ipycache versions up to 0.1.4.",
"id": "GHSA-gcm4-q2pg-xw89",
"modified": "2024-09-23T16:03:52Z",
"published": "2019-03-25T16:16:55Z",
"references": [
{
"type": "ADVISORY",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2019-7539"
},
{
"type": "WEB",
"url": "https://github.com/rossant/ipycache/issues/47"
},
{
"type": "WEB",
"url": "https://github.com/adi928/ipycache/commit/9cc7cb891ff169b3e8a6f5e84afd8238f566ad8e"
},
{
"type": "WEB",
"url": "https://github.com/adi928/ipycache/commit/c73a726744c90cc2cb200b159edbaf5deddcb753"
},
{
"type": "ADVISORY",
"url": "https://github.com/advisories/GHSA-gcm4-q2pg-xw89"
},
{
"type": "WEB",
"url": "https://github.com/pypa/advisory-database/tree/main/vulns/ipycache/PYSEC-2019-180.yaml"
},
{
"type": "PACKAGE",
"url": "https://github.com/rossant/ipycache"
}
],
"schema_version": "1.4.0",
"severity": [
{
"score": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:H/I:H/A:H",
"type": "CVSS_V3"
},
{
"score": "CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:P/VC:H/VI:H/VA:H/SC:H/SI:H/SA:H",
"type": "CVSS_V4"
}
],
"summary": "ipycache is vulnerable to Code Injection"
}
GHSA-GCXP-XG77-798J
Vulnerability from github – Published: 2026-02-22 03:30 – Updated: 2026-02-26 15:32A vulnerability was detected in funadmin up to 7.1.0-rc4. This issue affects the function getMember of the file app/common/service/AuthCloudService.php of the component Backend Endpoint. The manipulation of the argument cloud_account results in deserialization. The attack may be performed from remote. The exploit is now public and may be used. The vendor was contacted early about this disclosure but did not respond in any way.
{
"affected": [
{
"package": {
"ecosystem": "Packagist",
"name": "funadmin/funadmin"
},
"ranges": [
{
"events": [
{
"introduced": "0"
},
{
"last_affected": "7.1.0-rc4"
}
],
"type": "ECOSYSTEM"
}
]
}
],
"aliases": [
"CVE-2026-2898"
],
"database_specific": {
"cwe_ids": [
"CWE-20",
"CWE-502"
],
"github_reviewed": true,
"github_reviewed_at": "2026-02-26T15:32:52Z",
"nvd_published_at": "2026-02-22T01:16:00Z",
"severity": "LOW"
},
"details": "A vulnerability was detected in funadmin up to 7.1.0-rc4. This issue affects the function getMember of the file app/common/service/AuthCloudService.php of the component Backend Endpoint. The manipulation of the argument cloud_account results in deserialization. The attack may be performed from remote. The exploit is now public and may be used. The vendor was contacted early about this disclosure but did not respond in any way.",
"id": "GHSA-gcxp-xg77-798j",
"modified": "2026-02-26T15:32:52Z",
"published": "2026-02-22T03:30:26Z",
"references": [
{
"type": "ADVISORY",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2026-2898"
},
{
"type": "WEB",
"url": "https://github.com/I4m6da/CVE/issues/5"
},
{
"type": "WEB",
"url": "https://github.com/I4m6da/CVE/issues/5#issue-3890444166"
},
{
"type": "PACKAGE",
"url": "https://github.com/funadmin/funadmin"
},
{
"type": "WEB",
"url": "https://vuldb.com/?ctiid.347209"
},
{
"type": "WEB",
"url": "https://vuldb.com/?id.347209"
},
{
"type": "WEB",
"url": "https://vuldb.com/?submit.753976"
}
],
"schema_version": "1.4.0",
"severity": [
{
"score": "CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:U/C:L/I:L/A:L",
"type": "CVSS_V3"
},
{
"score": "CVSS:4.0/AV:N/AC:L/AT:N/PR:L/UI:P/VC:L/VI:L/VA:L/SC:N/SI:N/SA:N/E:P",
"type": "CVSS_V4"
}
],
"summary": "funadmin: Deserialization Vulnerability in Backend Endpoint via AuthCloudService getMember Function"
}
GHSA-GF3J-QPXP-849P
Vulnerability from github – Published: 2022-05-14 01:36 – Updated: 2022-05-14 01:36ZoneMinder version <= 1.32.2 contains a Other/Unknown vulnerability in User-controlled parameter that can result in Disclosure of confidential data, denial of service, SSRF, remote code execution.
{
"affected": [],
"aliases": [
"CVE-2018-1000833"
],
"database_specific": {
"cwe_ids": [
"CWE-502"
],
"github_reviewed": false,
"github_reviewed_at": null,
"nvd_published_at": "2018-12-20T15:29:00Z",
"severity": "CRITICAL"
},
"details": "ZoneMinder version \u003c= 1.32.2 contains a Other/Unknown vulnerability in User-controlled parameter that can result in Disclosure of confidential data, denial of service, SSRF, remote code execution.",
"id": "GHSA-gf3j-qpxp-849p",
"modified": "2022-05-14T01:36:14Z",
"published": "2022-05-14T01:36:14Z",
"references": [
{
"type": "ADVISORY",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2018-1000833"
},
{
"type": "WEB",
"url": "https://github.com/ZoneMinder/zoneminder/issues/2272"
},
{
"type": "WEB",
"url": "https://0dd.zone/2018/10/28/zoneminder-Object-Injection-2"
}
],
"schema_version": "1.4.0",
"severity": [
{
"score": "CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H",
"type": "CVSS_V3"
}
]
}
GHSA-GF62-Q6C8-6VXG
Vulnerability from github – Published: 2026-07-04 03:31 – Updated: 2026-07-04 03:31Picklescan before 0.0.33 fails to detect the numpy.f2py.crackfortran.getlincoef gadget in pickle reduce methods, allowing arbitrary code execution. Attackers can craft malicious pickle files that execute arbitrary Python code when loaded, bypassing Picklescan's safety checks and enabling supply-chain poisoning of shared model files.
{
"affected": [],
"aliases": [
"CVE-2025-71372"
],
"database_specific": {
"cwe_ids": [
"CWE-502"
],
"github_reviewed": false,
"github_reviewed_at": null,
"nvd_published_at": "2026-07-04T02:16:23Z",
"severity": "HIGH"
},
"details": "Picklescan before 0.0.33 fails to detect the numpy.f2py.crackfortran.getlincoef gadget in pickle __reduce__ methods, allowing arbitrary code execution. Attackers can craft malicious pickle files that execute arbitrary Python code when loaded, bypassing Picklescan\u0027s safety checks and enabling supply-chain poisoning of shared model files.",
"id": "GHSA-gf62-q6c8-6vxg",
"modified": "2026-07-04T03:31:02Z",
"published": "2026-07-04T03:31:02Z",
"references": [
{
"type": "WEB",
"url": "https://github.com/mmaitre314/picklescan/security/advisories/GHSA-rrxm-2pvv-m66x"
},
{
"type": "ADVISORY",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2025-71372"
},
{
"type": "WEB",
"url": "https://www.vulncheck.com/advisories/picklescan-arbitrary-code-execution-via-numpy-f2py-crackfortran-getlincoef-gadget"
}
],
"schema_version": "1.4.0",
"severity": [
{
"score": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:N",
"type": "CVSS_V3"
},
{
"score": "CVSS:4.0/AV:N/AC:L/AT:P/PR:N/UI:P/VC:H/VI:H/VA:N/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X",
"type": "CVSS_V4"
}
]
}
GHSA-GF6F-VFGF-69VF
Vulnerability from github – Published: 2022-11-01 12:00 – Updated: 2022-11-02 19:00Delta Electronics InfraSuite Device Master versions 00.00.01a and prior deserialize network packets without proper verification. If the device connects to an attacker-controlled server, the attacker could send maliciously crafted packets that would be deserialized and executed, leading to remote code execution.
{
"affected": [],
"aliases": [
"CVE-2022-41779"
],
"database_specific": {
"cwe_ids": [
"CWE-502"
],
"github_reviewed": false,
"github_reviewed_at": null,
"nvd_published_at": "2022-10-31T20:15:00Z",
"severity": "CRITICAL"
},
"details": "Delta Electronics InfraSuite Device Master versions 00.00.01a and prior deserialize network packets without proper verification. If the device connects to an attacker-controlled server, the attacker could send maliciously crafted packets that would be deserialized and executed, leading to remote code execution.",
"id": "GHSA-gf6f-vfgf-69vf",
"modified": "2022-11-02T19:00:32Z",
"published": "2022-11-01T12:00:36Z",
"references": [
{
"type": "ADVISORY",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2022-41779"
},
{
"type": "WEB",
"url": "https://www.cisa.gov/uscert/ics/advisories/icsa-22-298-07"
}
],
"schema_version": "1.4.0",
"severity": [
{
"score": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H",
"type": "CVSS_V3"
}
]
}
GHSA-GF8C-XMWJ-WHRH
Vulnerability from github – Published: 2026-06-20 15:32 – Updated: 2026-06-20 15:32SP LMS (com_splms) < 4.1.4 by JoomShaper deserializes user-controlled cookie data without validation, enabling an unauthenticated remote attacker to execute arbitrary code on the server.
{
"affected": [],
"aliases": [
"CVE-2026-48909"
],
"database_specific": {
"cwe_ids": [
"CWE-502"
],
"github_reviewed": false,
"github_reviewed_at": null,
"nvd_published_at": "2026-06-20T13:16:42Z",
"severity": "CRITICAL"
},
"details": "SP LMS (com_splms) \u003c 4.1.4 by JoomShaper deserializes user-controlled cookie data without validation, enabling an unauthenticated remote attacker to execute arbitrary code on the server.",
"id": "GHSA-gf8c-xmwj-whrh",
"modified": "2026-06-20T15:32:23Z",
"published": "2026-06-20T15:32:23Z",
"references": [
{
"type": "ADVISORY",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2026-48909"
},
{
"type": "WEB",
"url": "https://www.joomshaper.com"
}
],
"schema_version": "1.4.0",
"severity": [
{
"score": "CVSS:4.0/AV:N/AC:L/AT:P/PR:N/UI:N/VC:H/VI:H/VA:H/SC:H/SI:H/SA:H/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X",
"type": "CVSS_V4"
}
]
}
GHSA-GF8H-GQ53-288J
Vulnerability from github – Published: 2026-07-24 21:08 – Updated: 2026-07-24 21:08Summary
The GHSA-6c99-87fr-6q7r fix wrapped WebAuthn authenticator deserialization in an ObjectInputFilter meant to allow only AuthenticatorImpl, but it short-circuits to ALLOWED for any object at stream depth > 1. Because the Java serialization filter is consulted for every class in the graph (and depth == 1 only for the root's concrete class), the allowlist constrains only the root and leaves the entire nested graph unchecked.
Impact
An attacker can craft a stream rooted at AuthenticatorImpl with an arbitrary gadget chain nested inside. The gadget's readObject/readResolve executes during readObject() — before the cast and before any assertion verification — enabling remote code execution when a gadget is on the classpath. The deserialization sink is reached pre-authentication via an attacker-chosen userHandle.
{
"affected": [
{
"database_specific": {
"last_known_affected_version_range": "\u003c= 16.1.1"
},
"package": {
"ecosystem": "Maven",
"name": "org.openidentityplatform.openam:openam-auth-webauthn"
},
"ranges": [
{
"events": [
{
"introduced": "0"
},
{
"fixed": "16.1.2"
}
],
"type": "ECOSYSTEM"
}
]
}
],
"aliases": [
"CVE-2026-62263"
],
"database_specific": {
"cwe_ids": [
"CWE-502"
],
"github_reviewed": true,
"github_reviewed_at": "2026-07-24T21:08:46Z",
"nvd_published_at": null,
"severity": "CRITICAL"
},
"details": "### Summary\nThe GHSA-6c99-87fr-6q7r fix wrapped WebAuthn authenticator deserialization in an `ObjectInputFilter` meant to allow only `AuthenticatorImpl`, but it short-circuits to `ALLOWED` for any object at stream `depth \u003e 1`. Because the Java serialization filter is consulted for every class in the graph (and `depth == 1` only for the root\u0027s concrete class), the allowlist constrains only the root and leaves the entire nested graph unchecked.\n\n### Impact\nAn attacker can craft a stream rooted at `AuthenticatorImpl` with an arbitrary gadget chain nested inside. The gadget\u0027s `readObject`/`readResolve` executes during `readObject()` \u2014 before the cast and before any assertion verification \u2014 enabling remote code execution when a gadget is on the classpath. The deserialization sink is reached pre-authentication via an attacker-chosen `userHandle`.",
"id": "GHSA-gf8h-gq53-288j",
"modified": "2026-07-24T21:08:46Z",
"published": "2026-07-24T21:08:46Z",
"references": [
{
"type": "WEB",
"url": "https://github.com/OpenIdentityPlatform/OpenAM/security/advisories/GHSA-gf8h-gq53-288j"
},
{
"type": "WEB",
"url": "https://github.com/OpenIdentityPlatform/OpenAM/commit/9dd0fbe07f70f118cf45042d3a9ffb32f3c21e08"
},
{
"type": "PACKAGE",
"url": "https://github.com/OpenIdentityPlatform/OpenAM"
},
{
"type": "WEB",
"url": "https://github.com/OpenIdentityPlatform/OpenAM/releases/tag/16.1.2"
}
],
"schema_version": "1.4.0",
"severity": [
{
"score": "CVSS:4.0/AV:N/AC:L/AT:P/PR:N/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N",
"type": "CVSS_V4"
}
],
"summary": "OpenAM: WebAuthn Java deserialization RCE via ObjectInputFilter depth\u003e1 bypass"
}
GHSA-GF99-RRRR-WJQH
Vulnerability from github – Published: 2025-03-20 12:32 – Updated: 2025-03-20 12:32A pickle deserialization vulnerability exists in the Latex English error correction plug-in function of binary-husky/gpt_academic versions up to and including 3.83. This vulnerability allows attackers to achieve remote command execution by deserializing untrusted data. The issue arises from the inclusion of numpy in the deserialization whitelist, which can be exploited by constructing a malicious compressed package containing a merge_result.pkl file and a merge_proofread_en.tex file. The vulnerability is fixed in commit 91f5e6b.
{
"affected": [],
"aliases": [
"CVE-2024-11039"
],
"database_specific": {
"cwe_ids": [
"CWE-502"
],
"github_reviewed": false,
"github_reviewed_at": null,
"nvd_published_at": "2025-03-20T10:15:23Z",
"severity": "HIGH"
},
"details": "A pickle deserialization vulnerability exists in the Latex English error correction plug-in function of binary-husky/gpt_academic versions up to and including 3.83. This vulnerability allows attackers to achieve remote command execution by deserializing untrusted data. The issue arises from the inclusion of numpy in the deserialization whitelist, which can be exploited by constructing a malicious compressed package containing a merge_result.pkl file and a merge_proofread_en.tex file. The vulnerability is fixed in commit 91f5e6b.",
"id": "GHSA-gf99-rrrr-wjqh",
"modified": "2025-03-20T12:32:41Z",
"published": "2025-03-20T12:32:41Z",
"references": [
{
"type": "ADVISORY",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2024-11039"
},
{
"type": "WEB",
"url": "https://github.com/binary-husky/gpt_academic/commit/91f5e6b8f754beb47b02f7c1893804c1c9543ccb"
},
{
"type": "WEB",
"url": "https://huntr.com/bounties/f233a365-522c-44f6-876f-db492fb58ad5"
}
],
"schema_version": "1.4.0",
"severity": [
{
"score": "CVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H",
"type": "CVSS_V3"
}
]
}
GHSA-GFGP-V7GP-QFCJ
Vulnerability from github – Published: 2022-05-14 03:41 – Updated: 2022-05-14 03:41NASA Kodiak version v1.0 contains a CWE-502 vulnerability in Kodiak library's data processing function that can result in remote code execution. This attack appear to be exploitable via Victim opens an untrusted file for optimization using Kodiak library.
{
"affected": [],
"aliases": [
"CVE-2018-1000047"
],
"database_specific": {
"cwe_ids": [
"CWE-502"
],
"github_reviewed": false,
"github_reviewed_at": null,
"nvd_published_at": "2018-02-09T23:29:00Z",
"severity": "HIGH"
},
"details": "NASA Kodiak version v1.0 contains a CWE-502 vulnerability in Kodiak library\u0027s data processing function that can result in remote code execution. This attack appear to be exploitable via Victim opens an untrusted file for optimization using Kodiak library.",
"id": "GHSA-gfgp-v7gp-qfcj",
"modified": "2022-05-14T03:41:04Z",
"published": "2022-05-14T03:41:04Z",
"references": [
{
"type": "ADVISORY",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2018-1000047"
},
{
"type": "WEB",
"url": "https://github.com/nasa/Kodiak/issues/5"
}
],
"schema_version": "1.4.0",
"severity": [
{
"score": "CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H",
"type": "CVSS_V3"
}
]
}
Mitigation
If available, use the signing/sealing features of the programming language to assure that deserialized data has not been tainted. For example, a hash-based message authentication code (HMAC) could be used to ensure that data has not been modified.
Mitigation
When deserializing data, populate a new object rather than just deserializing. The result is that the data flows through safe input validation and that the functions are safe.
Mitigation
Explicitly define a final object() to prevent deserialization.
Mitigation
- Make fields transient to protect them from deserialization.
- An attempt to serialize and then deserialize a class containing transient fields will result in NULLs where the transient data should be. This is an excellent way to prevent time, environment-based, or sensitive variables from being carried over and used improperly.
Mitigation
Avoid having unnecessary types or gadgets (a sequence of instances and method invocations that can self-execute during the deserialization process, often found in libraries) available that can be leveraged for malicious ends. This limits the potential for unintended or unauthorized types and gadgets to be leveraged by the attacker. Add only acceptable classes to an allowlist. Note: new gadgets are constantly being discovered, so this alone is not a sufficient mitigation.
Mitigation
Employ cryptography of the data or code for protection. However, it's important to note that it would still be client-side security. This is risky because if the client is compromised then the security implemented on the client (the cryptography) can be bypassed.
Mitigation MIT-29
Strategy: Firewall
Use an application firewall that can detect attacks against this weakness. It can be beneficial in cases in which the code cannot be fixed (because it is controlled by a third party), as an emergency prevention measure while more comprehensive software assurance measures are applied, or to provide defense in depth [REF-1481].
CAPEC-586: Object Injection
An adversary attempts to exploit an application by injecting additional, malicious content during its processing of serialized objects. Developers leverage serialization in order to convert data or state into a static, binary format for saving to disk or transferring over a network. These objects are then deserialized when needed to recover the data/state. By injecting a malformed object into a vulnerable application, an adversary can potentially compromise the application by manipulating the deserialization process. This can result in a number of unwanted outcomes, including remote code execution.