PYSEC-2026-742
See a problem?- Import Source
- https://github.com/pypa/advisory-database/blob/main/vulns/py2play/PYSEC-2026-742.yaml
- JSON Data
- https://api.osv.dev/v1/vulns/PYSEC-2026-742
- Aliases
-
- CVE-2005-2875
- GHSA-wcpc-f63g-x26q
- Published
- 2026-07-02T14:13:19.651111Z
- Modified
- 2026-07-06T08:00:51.740731969Z
- Summary
- Py2Play Unpickles Untrusted Objects
- Details
-
Py2Play allows remote attackers to execute arbitrary Python code via pickled objects, which Py2Play unpickles and executes.
- References
-
- https://nvd.nist.gov/vuln/detail/CVE-2005-2875
- https://bugs.gentoo.org/show_bug.cgi?id=103524
- https://web.archive.org/web/20040824010038/http://home.gna.org/oomadness/fr/slune/index.html
- https://web.archive.org/web/20050213041706/http://soya.literati.org
- https://web.archive.org/web/20161225000907/http://www.securityfocus.com/bid/14864
- http://bugs.debian.org/cgi-bin/bugreport.cgi?bug=326976
- http://www.debian.org/security/2005/dsa-856
- http://www.gentoo.org/security/en/glsa/glsa-200509-09.xml
- https://pypi.org/project/py2play
- https://github.com/advisories/GHSA-wcpc-f63g-x26q
Affected packages
PyPI / py2play
Package
- Name
- py2play
- View open source insights on deps.dev
- Purl
- pkg:pypi/py2play