AIKIDO-2026-626655
stanza is vulnerable to Deserialization of Untrusted Data
59
Medium Risk
This Affects:
stanzaTL;DR
The Document.from_serialized() method reconstructs annotated documents by calling pickle.loads() directly on the supplied serialized string. An application that deserializes a Stanza Document originating from an untrusted source triggers full pickle deserialization, executing arbitrary code embedded in a crafted payload. The vulnerable serialization path had used unrestricted pickle since the feature was introduced. The fix routes legacy pickle loading through a restricted unpickler that blocks unsafe globals and moves default document serialization to JSON.
Who does this affect?
You are affected if you are using a version that falls within the vulnerable range and your application deserializes Stanza Document objects that originate from untrusted sources.
Background info
stanza is vulnerable to Deserialization of Untrusted Data in versions 1.1.1 - 1.13.0.
How to fix this
Upgrade the stanza library to the patch version.
Are You Affected?
Connect your repositories to instantly see whether vulnerable or malicious packages exist in your codebase.
Free. No credit card required.
I consent to receiving marketing communications based on Aikido’s Privacy Policy.
SOC 2Compliant
ISO 27001Compliant