picklescan vulnerabilities

CVEs whose affected-version data names the picklescan package (pip). Each record lists the affected and patched versions; check a specific version with the dependency checker or POST /api/sbom.

picklescan vulnerabilities

Duplicate Advisory: Picklescan missing detection when calling built-in python library function timeit.timeit()

Duplicate Advisory: Picklescan is missing detection when calling built-in Python cProfile.runctx

Duplicate Advisory: Picklescan is missing detection when calling built-in python idlelib.pyshell.ModifiedInterpreter.runcommand

Duplicate Advisory: Picklescan missing detection when calling pytorch function torch.utils._config_module.load_config

Duplicate Advisory: Picklescan has Incomplete List of Disallowed Inputs

Duplicate Advisory: Picklescan vulnerable to Arbitrary File Writing

Duplicate Advisory: Picklescan does not block ctypes

Duplicate Advisory: Picklescan has pickle parsing logic flaw that leads to malicious pickle file bypass

Duplicate Advisory: Picklescan Bypasses Unsafe Globals Check using pty.spawn

Duplicate Advisory: PickleScan's pkgutil.resolve_name has a universal blocklist bypass

Duplicate Advisory: picklescan has Arbitrary file read using `io.FileIO`

Duplicate Advisory: picklescan missing detection by simple obfuscation of a `builtins.eval` call

Duplicate Advisory: Picklescan (scan_pytorch) Bypass via dynamic eval MAGIC_NUMBER

Duplicate Advisory: PickleScan's profile.run blocklist mismatch allows exec() bypass

PickleScan has multiple stdlib modules with direct RCE not in blocklist

Picklescan (scan_pytorch) Bypass via dynamic eval MAGIC_NUMBER

picklescan vulnerable to arbitrary file create using logging.FileHandler

picklescan missing detection by simple obfuscation of a `builtins.eval` call

picklescan has Arbitrary file read using `io.FileIO`

Picklescan is vulnerable to RCE through missing detection when calling numpy.f2py.crackfortran._eval_length

Picklescan vulnerable to Arbitrary File Writing

Picklescan Bypasses Unsafe Globals Check using pty.spawn

Picklescan has Incomplete List of Disallowed Inputs

Picklescan does not block ctypes

Picklescan is vulnerable to RCE through missing detection when calling numpy.f2py.crackfortran.myeval

Picklescan is missing detection when calling built-in Python cProfile.runctx

Picklescan is missing detection when calling built-in python idlelib.pyshell.ModifiedInterpreter.runcommand

Picklescan is missing detection when calling built-in python ensurepip._run_pip

Picklescan has a missing detection when calling built-in python profile.Profile.run

Picklescan has a missing detection when calling built-in python trace.Trace.runctx