Components
Vulnerabilities
Pricing
MCP
Docs
Sign up
Login
Find vulnerabilities. Fix fast with AI.
Search components by package, version, or CVE to get started.
Ecosystem
Package
Version
Vulnerabilities
CVE-2025-63675
CVE-2025-63675
cryptidy through 1.2.4 allows code execution via untrusted data because pickle.loads is used. This occurs in aes_decrypt_message in symmetric_encryption.py.
Published Nov 1, 2025
https://github.com/advisories/GHSA-97w9-v595-3h5q
CVSS Score
High
8.8
Components Impacted
Components Impacted
Security Details
Security Details
Sonatype Research
Sonatype Research
Ecosystem
Package
Version
Ecosystem
Package
Version
pypi
cryptidy
1.0.5
pypi
cryptidy
1.0.7
pypi
cryptidy
1.1.0
pypi
cryptidy
1.2.0
pypi
cryptidy
1.2.1
pypi
cryptidy
1.2.2
pypi
cryptidy
1.2.3
pypi
cryptidy
1.2.4
1-8 of 8
CVE-2025-63675 | Components Impacted | Sonatype Guide | Sonatype Guide
