CVE-2014-3539: Rope Project Rope

Critical severity, CVSS 9.8. EPSS: 3% chance of exploitation in the next 30 days.

base/oi/doa.py in the Rope library in CPython (aka Python) allows remote attackers to execute arbitrary code by leveraging an unsafe call to pickle.load.

Affected products

• Rope Project Rope: before 0.11.0 (fixed in 0.11.0)

Published 2018-04-06. Last modified 2026-06-17.