Deserialization of Untrusted Data in Beaker

MEDIUM 6.8CVE-2013-7489 · GHSA-3cwm-7jmm-774w · PYSEC-2020-216 · Published 26/06/2020 · updated 17/06/2026

Package	Affected versions	Patched versions
beaker PyPI	`≤ 1.11.0all versions`	No fix yet
beaker beakerbrowser	`≤ 1.11.0`	No fix yet

Description

The Beaker library through 1.11.0 for Python is affected by deserialization of untrusted data, which could lead to arbitrary code execution.

NVD description

The Beaker library through 1.11.0 for Python is affected by deserialization of untrusted data, which could lead to arbitrary code execution.

Running one of these products? Scan your site to see whether it exposes a vulnerable version.