iterative datachain vulnerabilities

Latest iterative datachain CVEs

Newest publication first

1. CVE-2025-61677 DataChain: Deserialization of Untrusted Data from Environment Variables

   Published 2025-10-03

   Low·CVSS 2.5 EPSS 0.17%

   DataChain is a Python-based AI-data warehouse for transforming and analyzing unstructured data. Versions 0.34.1 and below allow for deseriaization of untrusted data because of the way the DataChain library reads serialized objects from environment variables (such as DATACHAIN__ME...

Sources: CVE.org, NVD, CISA KEV, FIRST EPSS, OSV and public exploit-reference metadata. Product matching comes from the published CVE records. A proof-of-concept means public code exists; it is not evidence of exploitation.