{"id":"GHSA-cc5p-54x3-hcf8","title":"Duplicate Advisory: Picklescan (scan_pytorch) Bypass via dynamic eval MAGIC_NUMBER","summary":"Duplicate Advisory: Picklescan (scan_pytorch) Bypass via dynamic eval MAGIC_NUMBER","severity":"high","cwe":["CWE-95"],"vendor":"picklescan","product":"picklescan","ecosystem":"pip","affected":["picklescan < 1.0.3"],"published":"2026-06-17","updated":"2026-06-18","source":"GHSA","sourceUrl":"https://github.com/advisories/GHSA-cc5p-54x3-hcf8","references":[{"url":"https://github.com/mmaitre314/picklescan/security/advisories/GHSA-97f8-7cmv-76j2"},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2026-53875"},{"url":"https://github.com/mmaitre314/picklescan/commit/134179474539648ba7dee1317959529fbd0e7f89"},{"url":"https://github.com/mmaitre314/picklescan/commit/2a8383cfeb4158567f9770d86597300c9e508d0f"},{"url":"https://www.vulncheck.com/advisories/picklescan-scanning-bypass-via-dynamic-eval-in-scan-pytorch"},{"url":"https://github.com/advisories/GHSA-cc5p-54x3-hcf8"}],"tags":["ghsa","pip"],"ingestedAt":"2026-06-29T14:31:47.194Z","slug":"GHSA-cc5p-54x3-hcf8","body":"## Overview\n\n## Duplicate Advisory\n\nThis advisory has been withdrawn because it is a duplicate of GHSA-97f8-7cmv-76j2. This link is maintained to preserve external references.\n\n## Original Description\npicklescan before 1.0.3 contains a scanning bypass vulnerability in the scan_pytorch function that allows attackers to embed malicious magic numbers via dynamic eval using the __reduce__ trick. Attackers can craft malicious PyTorch payloads that evade picklescan detection while remaining executable, enabling arbitrary code execution when loaded with torch.load().\n\n## Affected packages\n\n- `picklescan < 1.0.3`\n\n## Remediation\n\nRefer to the advisory for the patched release.","depth":"twilight","depthScore":41,"depthScoreParts":{"impact":41.3,"likelihood":0,"exploitation":0,"ransomware":0},"changes":[]}