PT-2025-32270 · Erc · Erc

Msfv3N0M · Published 2025-08-07 · Updated 2025-08-07 · CVE-2025-55136

Positive Technologies (AI Summary)

CVSS v3.1

5.7

Medium

Base vector

AV:L/AC:L/PR:N/UI:N/S:C/C:L/I:L/A:N

Name of the Vulnerable Software and Affected Versions ERC (aka Emotion Recognition in Conversation) versions through 0.3

Description ERC (aka Emotion Recognition in Conversation) is susceptible to insecure deserialization due to the use of jsonpickle when handling serialized objects.

Recommendations Versions prior to 0.3 should be updated. At the moment, there is no information about a newer version that contains a fix for this vulnerability.

Deserialization of Untrusted Data

Weakness Enumeration

CWE-502

Related Identifiers

CVE-2025-55136

Affected Products

Erc

References · 4

• https://nvd.nist.gov/vuln/detail/CVE-2025-55136 · Security Note
• https://osv.dev/vulnerability/CVE-2025-55136 · Vendor Advisory
• https://github.com/tae898/erc/pull/31 · Note
• https://twitter.com/CVEnew/status/1953499408898961901 · Twitter Post