Headline
GHSA-jm66-cg57-jjv5: Azure Core is vulnerable to deserialization of untrusted data
Deserialization of untrusted data in Azure Core shared client library for Python allows an authorized attacker to execute code over a network.
Skip to content
Navigation Menu
AI CODE CREATION
GitHub CopilotWrite better code with AI
GitHub SparkBuild and deploy intelligent apps
GitHub ModelsManage and compare prompts
MCP RegistryNewIntegrate external tools
View all features
- Pricing
Provide feedback
Saved searches****Use saved searches to filter your results more quickly
Sign up
Appearance settings
- GitHub Advisory Database
- GitHub Reviewed
- CVE-2026-21226
Azure Core is vulnerable to deserialization of untrusted data
High severity GitHub Reviewed Published Jan 13, 2026 to the GitHub Advisory Database • Updated Jan 13, 2026
Package
pip azure-core (pip)
Affected versions
< 1.38.0
Description
Published to the GitHub Advisory Database
Jan 13, 2026
Last updated
Jan 13, 2026
EPSS score