Staging Environment: Content and features may be unstable or change without notice.
Search for packages
Package details: pkg:pypi/parso@0.1.1
purl pkg:pypi/parso@0.1.1
Next non-vulnerable version 0.5.0
Latest non-vulnerable version 0.5.0
Risk
Vulnerabilities affecting this package (1)
Vulnerability Summary Fixed by
VCID-9c8p-3cx2-k7e6
Aliases:
CVE-2019-12760
GHSA-22mf-97vh-x8rw
PYSEC-2019-109
** DISPUTED ** A deserialization vulnerability exists in the way parso through 0.4.0 handles grammar parsing from the cache. Cache loading relies on pickle and, provided that an evil pickle can be written to a cache grammar file and that its parsing can be triggered, this flaw leads to Arbitrary Code Execution. NOTE: This is disputed because "the cache directory is not under control of the attacker in any common configuration."
0.5.0
Affected by 0 other vulnerabilities.
Vulnerabilities fixed by this package (0)
Vulnerability Summary Aliases
This package is not known to fix vulnerabilities.

Date Actor Action Vulnerability Source VulnerableCode Version
2026-06-02T04:05:41.723202+00:00 Pypa Importer Affected by VCID-9c8p-3cx2-k7e6 https://github.com/pypa/advisory-database/blob/main/vulns/parso/PYSEC-2019-109.yaml 38.6.0