PyPI: alvaro

SFTY-20220714-74322

Safety legacy ID: pyup.io-50145

Alvaro 1.1.1 replaced Pickle with JSON to prevent code injection vulnerabilities. https://github.com/edgecase963/Alvaro/commit/d87c53359e7edde827add46a7870d4192eef0451

PyPI

Created at: Nov 5, 2025Updated at: Nov 5, 2025

Overview

Alvaro 1.1.1 replaced Pickle with JSON to prevent code injection vulnerabilities. https://github.com/edgecase963/Alvaro/commit/d87c53359e7edde827add46a7870d4192eef0451

Advisory

Alvaro 1.1.1 replaced Pickle with JSON to prevent code injection vulnerabilities. https://github.com/edgecase963/Alvaro/commit/d87c53359e7edde827add46a7870d4192eef0451

Affected Package

Affecting alvaro package, versions<1.1.1

Also affects

---

How to Fix

Upgradealvaroto1.1.1or higher.

Mitigation and Workarounds

---

Vulnerable Functions

Functions linked to known vulnerabilities.

Vulnerable function data is available for Enterprise customers

Book a call with us to see Safety in action.

References

https://getsafety.com/vulnerabilities/SFTY-20220714-74322

Verified by Safety

Our Cybersecurity Intelligence Team reviewed this vulnerability. We combine public data with our own research to find issues not yet reported to public sources.

Learn more