MEDIUM5.5PyPI
GHSA-8jf4-fcjr-68c2· CVE-2025-6278, PYSEC-2025-67Upsonic is vulnerable to Path Traversal attack through its os.path.join function
Modified: 7/9/2025
package
PyPI/upsonic
pkg:pypi/upsonic
CRITICAL9.8PyPI
GHSA-cw73-5f7h-m4gv· CVE-2026-30625, PYSEC-2026-559Upsonic: remote code execution vulnerability in its MCP server/task creation functionality
Modified: 6/29/2026
MEDIUM5.5PyPI
GHSA-rpfv-46xj-5984· CVE-2025-6279, PYSEC-2025-68Upsonic has vulnerability in Pickle Handler component that can lead to deserialization
Modified: 7/9/2025
CRITICAL9.8PyPI
PYSEC-2025-67· CVE-2025-6278, GHSA-8jf4-fcjr-68c2Modified: 6/10/2026
HIGH8.0PyPI
PYSEC-2025-68· CVE-2025-6279, GHSA-rpfv-46xj-5984Modified: 6/10/2026
CRITICAL9.8PyPI
PYSEC-2026-559· CVE-2026-30625, GHSA-cw73-5f7h-m4gvUpsonic: remote code execution vulnerability in its MCP server/task creation functionality
Modified: 7/1/2026