diskcache-5.6.3-py3-none-any.whl: 1 vulnerabilities (highest severity is: 9.8) [master] (reachable)

[renovate]

📂 Vulnerable Library - diskcache-5.6.3-py3-none-any.whl

Disk Cache -- Disk and file backed persistent cache.

Library home page: https://files.pythonhosted.org/packages/3f/27/4570e78fc0bf5ea0ca45eb1de3818a23787af9b390c0b0a0033a1b8236f9/diskcache-5.6.3-py3-none-any.whl

Path to dependency file: /requirements.txt

Path to vulnerable library: /tmp/ws-ua_20260720225829_XICAJU/python_DRWLIV/202607202258321/env/lib/python3.10/site-packages/diskcache-5.6.3.dist-info

Findings

Finding	Severity	🎯 CVSS	Exploit Maturity	EPSS	Library	Type	Fixed in	Remediation Available	Reachability
CVE-2025-69872	🟣 Critical	9.8	Not Defined	< 1%	diskcache-5.6.3-py3-none-any.whl	Direct	N/A	❌	Reachable

Details

🟣CVE-2025-69872

Vulnerable Library - diskcache-5.6.3-py3-none-any.whl

Disk Cache -- Disk and file backed persistent cache.

Library home page: https://files.pythonhosted.org/packages/3f/27/4570e78fc0bf5ea0ca45eb1de3818a23787af9b390c0b0a0033a1b8236f9/diskcache-5.6.3-py3-none-any.whl

Path to dependency file: /requirements.txt

Path to vulnerable library: /tmp/ws-ua_20260720225829_XICAJU/python_DRWLIV/202607202258321/env/lib/python3.10/site-packages/diskcache-5.6.3.dist-info

Dependency Hierarchy:

• ❌ diskcache-5.6.3-py3-none-any.whl (Vulnerable Library)

---

Reachability Analysis

This vulnerability is potentially reachable:

- stable-diffusion-webui/modules/cache.py (Application)
    -> ❌ diskcache-5.6.3/diskcache/__init__.py (Vulnerable Component)

---

Vulnerability Details

DiskCache (python-diskcache) through 5.6.3 uses Python pickle for serialization by default. An attacker with write access to the cache directory can achieve arbitrary code execution when a victim application reads from the cache.

Publish Date: Feb 11, 2026 12:00 AM

URL: CVE-2025-69872

Threat Assessment

Exploit Maturity:Not Defined

EPSS:< 1%

Score: 9.8

---

Suggested Fix

Type: Upgrade version

Origin:

Release Date:

Fix Resolution :