Skip to content

Security: GodmanAutomations/Kira

Security

SECURITY.md

Security Policy

Supported Versions

Version Supported
v9.x
< 9.0

Reporting a Vulnerability

Please report vulnerabilities via email/Telegram to the maintainer.

Known Vulnerabilities & Mitigations

CVE-2025-69872 (DiskCache Unsafe Pickle)

  • Status: Mitigated ✅
  • Component: dspy-ai -> diskcache
  • Impact: Arbitrary code execution via malicious cache files.
  • Mitigation: Runtime patch in athena.core.security enforces diskcache.JSONDisk serializer, blocking pickle exploits.
  • Verification: athena.boot.orchestrator applies this patch on startup.

There aren't any published security advisories