Medium
CVSS 5.7
Overview
ERC (aka Emotion Recognition in Conversation) through 0.3 has insecure deserialization via a serialized object because jsonpickle is used.
CVE-2025-55136
ERC (aka Emotion Recognition in Conversation) through 0.3 has insecure deseriali...
Risk analysis
This vulnerability is rated 🟡 MEDIUM.
- CVSS: 5.7 (MEDIUM)
- Detected tags: deserialization (tag impact: MODERATE)
Recommended actions:
- Avoid untrusted deserialization; prefer safe formats (JSON) and signatures.