CriticalCVSS 9.8
EPSS 6.2%
Jython before 2.7.1rc1 allows attackers to execute arbitrary code via a crafted serialized PyFunction object.