irmen/Pyro3

Releases12

Frequency1 month 2 weeks

Last Release about 14 years ago

Stars4

Pyro 3.x (old version - unmaintained - use Pyro4 instead)

CVE History

CVE	Published	CVSS v3	CVSS v2
CVE-2026-31048 ↗	Apr 13, 2026Monday, 13 April 2026, 20:16	9.8 CRITICAL	—
An issue in the <code>pickle</code> protocol of Pyro v3.x allows attackers to execute arbitrary code via supplying a crafted pickled string message.
CVE-2011-2765 ↗	Aug 20, 2018Monday, 20 August 2018, 13:29	—	5 MEDIUM
pyro before 3.15 unsafely handles pid files in temporary directory locations and opening the pid file as root. An attacker can use this flaw to overwrite arbitrary files via symlinks.