Package impact
PyPI / datapizza-ai-core
| CVE | Severity | CVSS | Risk | Flags | OS | Vendor | Published | Description |
|---|---|---|---|---|---|---|---|---|
| CVE-2026-2970 | high | 7.5 | 7.5 | 3mo ago | datapizza-ai has unsafe deserialization via pickle.loads() in RedisCache | |||
| CVE-2026-2969 | high | 7.2 | 7.2 | 3mo ago | datapizza-ai: Server-Side Template Injection in ChatPromptTemplate via Jinja2 Template Handler |