upsonic vulnerabilities (PyPI)

3 vulnerabilities.

• upsonic PyPI Upsonic: remote code execution vulnerability in its MCP server/task creation functionality CVE-2026-30625 Fix available 9.8 CriticalApril 15, 2026
• upsonic PyPI Upsonic Pickle add_tool cloudpickle.loads deserialization CVE-2025-6279 Fix available 5.1 MediumJune 19, 2025
• upsonic PyPI Upsonic server.py os.path.join path traversal CVE-2025-6278 Fix available 5.1 MediumJune 19, 2025