Skip to main content
cve.nowby Sazabi
← PyPI
PyPIPackage

rpyc

2 known vulnerabilities (1 high), with the versions each affects and the releases that fix them.

Latest release
6.0.2 (Apr 18, 2025): no advisory affects it
Newest unaffected release
6.0.2 (Apr 18, 2025), the latest release
Advisories
2 · 1 high
Weekly downloads
458.5K
Dependents
328
Releases
30 since 3.2.0 (Sep 30, 2011)
Registry
PyPI
Releases read
Nov 8, 2026

Version timeline

Every release cve.now has on record, lowest version on the left; each bar is a run of versions an advisory affects.

Advisories 2

  • In RPyC before 6.0.0, when a server exposes a method that calls the attribute named array for a client-provided netref (e.g…

    Affected: from 4.0.0, fixed in 6.0.0; fixed in 6.0.0.

    Fixed in 6.0.0 (released Feb 23, 2024, 18 days before disclosure).

    The latest release, 6.0.2, is not affected.

  • In RPyC 4.1.x through 4.1.1, a remote attacker can dynamically modify object attributes to construct a remote procedure call that executes…

    Affected: from 4.1.0, fixed in 4.1.1; from 4.1.0, fixed in 4.1.2.

    Fixed in 4.1.2 (released Oct 3, 2019, the day of disclosure).

    The latest release, 6.0.2, is not affected.