Deserialization in Zyddnys Manga-image-translator
CVE-2026-26215
manga-image-translator version beta-0.3 and prior in shared API mode contains an unsafe deserialization vulnerability that can lead to unauthenticated remote code execution. The FastAPI endpoints /simple_execute/{method} and /execute/{meth…
Vulnerability class: Insecure Deserialization
EPSS: 0.009 (56.5th percentile) — read the EPSS interpretation.
Affected products
- Zyddnys Manga-image-translator — versions 0
Weakness classification (CWE)
References
- disclosure@vulncheck.com (technical-description, exploit)
- disclosure@vulncheck.com (issue-tracking, patch)
- disclosure@vulncheck.com (issue-tracking)
- disclosure@vulncheck.com (product)
- disclosure@vulncheck.com (product)
- disclosure@vulncheck.com (third-party-advisory)