CVE-2025-63675

Published October 31st, 2025

View on NVD ↗

CVSS v3

6.9

MEDIUM

CVSS v2

N/A

Affected

PROJECTS

Description

cryptidy through 1.2.4 allows code execution via untrusted data because pickle.loads is used. This occurs in aes_decrypt_message in symmetric_encryption.py.

javiermorales36/cryptidy-analysis

GitHub

netinvent/cryptidy

Easy but secure AES & RSA encryption / decryption

GitHub