Neutron, our AI engine, scored 97.1% on UC Berkeley's CyberGym benchmark. Learn more

Tag

#pickle

1 articles

Deep Dive

Stanza Lemmatizer RCE via Pickle Deserialization (CVE-2026-115878)

Stanza 1.14.0 loads an inner gzip pickle from a lemma checkpoint with no restriction, so a crafted model runs code; fixed in 1.15.0.

Ostorlab Team
Nov 04, 2026