{"id":"CVE-2026-33155","aliases":["GHSA-54jj-px8x-5w5q","PYSEC-2026-2445"],"url":"https://o3.security/vulnerability/CVE-2026-33155","summary":"DeepDiff has Memory Exhaustion DoS through SAFE_TO_IMPORT","details":"DeepDiff is a project focused on Deep Difference and search of any Python data. From version 5.0.0 to before version 8.6.2, the pickle unpickler _RestrictedUnpickler validates which classes can be loaded but does not limit their constructor arguments. A few of the types in SAFE_TO_IMPORT have constructors that allocate memory proportional to their input (builtins.bytes, builtins.list, builtins.range). A 40-byte pickle payload can force 10+ GB of memory, which crashes applications that load delta objects or call pickle_load with untrusted data. This issue has been patched in version 8.6.2.","published":"2026-03-20T20:25:53.405Z","modified":"2026-07-15T01:49:13.702055352Z","cvss":null,"epss":null,"cisaKev":null,"exploitsKnown":0,"affectedPackages":[{"ecosystem":"PyPI","name":"deepdiff","fixedVersion":"8.6.2"}],"fix":{"url":"https://github.com/qlustered/deepdiff/commit/0d07ec21d12b46ef4e489383b363eadc22d990fb","label":"qlustered/deepdiff@0d07ec2"},"references":[{"type":"ADVISORY","url":"https://github.com/CVEProject/cvelistV5/tree/main/cves/2026/33xxx/CVE-2026-33155.json"},{"type":"ADVISORY","url":"https://github.com/qlustered/deepdiff/security/advisories/GHSA-54jj-px8x-5w5q"},{"type":"ADVISORY","url":"https://nvd.nist.gov/vuln/detail/CVE-2026-33155"},{"type":"FIX","url":"https://github.com/qlustered/deepdiff/commit/0d07ec21d12b46ef4e489383b363eadc22d990fb"}],"provenance":{"sources":["OSV.dev","FIRST.org (EPSS)"],"lastVerified":"2026-07-15T01:49:13.702055352Z"}}