pkg:PyPI/upsonic

All known vulnerabilities

• CRITICAL9.8CVE-2026-30625Upsonic: remote code execution vulnerability in its MCP server/task creation functionality
  from 0, < 0.72.0
• MEDIUM5.5CVE-2025-6278Upsonic is vulnerable to Path Traversal attack through its os.path.join function
  from 0, < 0.56.0
• MEDIUM5.5CVE-2025-6279Upsonic has vulnerability in Pickle Handler component that can lead to deserialization
  from 0, < 0.56.0
• MEDIUM5.5Upsonic is vulnerable to Path Traversal attack through its os.path.join function
  from 0, < 0.56.0
• MEDIUM5.5Upsonic has vulnerability in Pickle Handler component that can lead to deserialization
  from 0, < 0.56.0