apscheduler vulnerabilities

CVEs whose affected-version data names the apscheduler package (pip). Each record lists the affected and patched versions; check a specific version with the dependency checker or POST /api/sbom.

1 CVERSS

CVE-2026-31072Critical· 9.8

APScheduler's JSONSerializer and CBORSerializer are vulnerable to Remote Code Execution (RCE) via Insecure Deserialization

APScheduler's JSONSerializer and CBORSerializer are vulnerable to Remote Code Execution (RCE) via Insecure Deserialization

▾ Midnightapscheduler · apschedulerEPSS 0.81%via OSV

apscheduler vulnerabilities (CVEs) · VulnSea