5.7
/ 10
MEDIUM
CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:C/C:L/I:L/A:N
Description
ERC (aka Emotion Recognition in Conversation) through 0.3 has insecure deserialization via a serialized object because jsonpickle is used.
AI Analysis
Insecure deserialization vulnerability in ERC through version 0.3 allows potential code execution via untrusted data processed by jsonpickle.
Basic Information
ID
CVE-2025-55136
Source
mitre
Published
Aug 7, 2025 at 00:00
Modified
Aug 7, 2025 at 16:34
Affected Product
Vendor
tae898
Product
ERC
Affected Versions
tae898 ERC 0
CWE Classification
AI Assessment
AI Severity
Low
Vendor
tae898
Product
ERC
Version
0.3