CVE-2020-22083

CVE-2020-22083 is a critical remote code execution vulnerability affecting jsonpickle versions up to 1.4.1. It allows an attacker to execute arbitrary code by deserializing a malicious payload using the decode() function. With a CVSS score of 9.8, this vulnerability is easily exploitable over the network with no user interaction, leading to complete compromise of confidentiality, integrity, and availability. While there is no evidence of active exploitation or public exploit code, the vulnerability has garnered significant community discussion, indicating awareness among security researchers.