Critical severity9.8NVD Advisory· Published May 16, 2026· Updated May 26, 2026
CVE-2021-47952
CVE-2021-47952
Description
python jsonpickle 2.0.0 contains a remote code execution vulnerability that allows attackers to execute arbitrary Python commands by deserializing malicious JSON payloads containing py/repr objects. Attackers can craft JSON strings with py/repr directives that invoke the eval function during deserialization to execute arbitrary code.
AI Insight
LLM-synthesized narrative grounded in this CVE's description and references.
Affected products
2(expand)+ 1 more
- (no CPE)
- (no CPE)range: = 2.0.0
Patches
Vulnerability mechanics
References
3News mentions
0No linked articles in our index yet.