picklescan vulnerabilities

CVEs whose affected-version data names the picklescan package (pip). Each record lists the affected and patched versions; check a specific version with the dependency checker or POST /api/sbom.

56 CVEsRSS

CVE-2025-10157High· 7.8

1y ago

A Protection Mechanism Failure vulnerability in mmaitre314 picklescan versions up to and including 0.0.30 allows a remote attacker to bypass the unsafe globals check

A Protection Mechanism Failure vulnerability in mmaitre314 picklescan versions up to and including 0.0.30 allows a remote attacker to bypass the unsafe globals check. This is possible because the scanner performs an exact match for modul…

▾ Twilightmmaitre314 · picklescanEPSS 0.79%via NVD

CVE-2025-10156Critical· 9.8

1y ago

An Improper Handling of Exceptional Conditions vulnerability in the ZIP archive scanning component of mmaitre314 picklescan allows a remote attacker to bypass security scans

An Improper Handling of Exceptional Conditions vulnerability in the ZIP archive scanning component of mmaitre314 picklescan allows a remote attacker to bypass security scans. This is achieved by crafting a ZIP archive containing a file w…

▾ Midnightmmaitre314 · picklescanEPSS 1.5%via NVD

CVE-2025-10155High· 7.8

1y ago

An Improper Input Validation vulnerability in the scanning logic of mmaitre314 picklescan versions up to and including 0.0.30 allows a remote attacker to bypass pickle files security checks by supplying a standard pickle file with a PyTo…

An Improper Input Validation vulnerability in the scanning logic of mmaitre314 picklescan versions up to and including 0.0.30 allows a remote attacker to bypass pickle files security checks by supplying a standard pickle file with a PyTo…

▾ Twilightmmaitre314 · picklescanEPSS 0.85%via NVD

CVE-2025-71378Medium

1y ago

Picklescan is missing detection when calling built-in Python cProfile.runctx

▾ Sunlitpicklescan · picklescanEPSS 0.48%via OSV

CVE-2025-71357High

1y ago

Picklescan is missing detection when calling built-in python idlelib.pyshell.ModifiedInterpreter.runcommand

▾ Twilightpicklescan · picklescanEPSS 0.39%via OSV

CVE-2025-71344Medium

1y ago

Picklescan is missing detection when calling built-in python ensurepip._run_pip

▾ Sunlitpicklescan · picklescanEPSS 0.64%via OSV

CVE-2025-71374Medium

1y ago

Picklescan has a missing detection when calling built-in python profile.Profile.run

▾ Sunlitpicklescan · picklescanEPSS 0.64%via OSV

CVE-2025-71352Medium

1y ago

Picklescan has a missing detection when calling built-in python trace.Trace.runctx

▾ Sunlitpicklescan · picklescanEPSS 0.64%via OSV

CVE-2025-71368Medium

1y ago

Picklescan is missing detection when calling built-in python doctest.debug_script

▾ Sunlitpicklescan · picklescanEPSS 0.84%via OSV

CVE-2025-71371Medium

1y ago

Picklescan has a missing detection when calling built-in python code.InteractiveInterpreter

▾ Sunlitpicklescan · picklescanEPSS 0.54%via OSV

CVE-2025-71361Medium

1y ago

Picklescan has a missing detection when calling built-in python idlelib.calltip.Calltip

▾ Sunlitpicklescan · picklescanEPSS 0.60%via OSV

CVE-2025-71376High· 8.1

1y ago

Picklescan has a missing detection when calling built-in python idlelib.autocomplete.AutoComplete.fetch_completions

▾ Twilightpicklescan · picklescanEPSS 0.43%via OSV

CVE-2025-71358Medium

1y ago

Picklescan has a missing detection when calling built-in python idlelib.autocomplete.AutoComplete.get_entity

▾ Sunlitpicklescan · picklescanEPSS 0.43%via OSV

CVE-2025-71341High· 8.1

1y ago

Picklescan has a missing detection when calling built-in python profile.Profile.runctx

▾ Twilightpicklescan · picklescanEPSS 0.61%via OSV

CVE-2025-71349Medium

1y ago

Picklescan has a missing detection when calling built-in python trace.Trace.run

▾ Sunlitpicklescan · picklescanEPSS 0.61%via OSV

CVE-2025-71363Medium

1y ago

Picklescan is missing detection when calling built-in python cProfile.run

▾ Sunlitpicklescan · picklescanEPSS 0.64%via OSV

CVE-2025-71354Medium

1y ago

Picklescan has a missing detection when calling built-in python idlelib.debugobj.ObjectTreeItem

▾ Sunlitpicklescan · picklescanEPSS 0.45%via OSV

CVE-2025-71340Medium

1y ago

Picklescan is missing detection when calling built-in python idlelib.pyshell.ModifiedInterpreter.runcode

▾ Sunlitpicklescan · picklescanEPSS 0.43%via OSV

CVE-2025-71348High· 8.1

1y ago

Picklescan is missing detection when calling pytorch function torch.utils._config_module.load_config

▾ Twilightpicklescan · picklescanEPSS 0.55%via OSV

CVE-2025-71370High· 8.1

1y ago

Picklescan missing detection when calling pytorch function torch.jit.unsupported_tensor_ops.execWrapper

▾ Twilightpicklescan · picklescanEPSS 0.54%via OSV

CVE-2025-71350Medium

1y ago

Picklescan missing detection when calling pytorch function torch.utils.collect_env.run

▾ Sunlitpicklescan · picklescanEPSS 0.43%via OSV

CVE-2025-71325High

1y ago

Picklescan has pickle parsing logic flaw that leads to malicious pickle file bypass

▾ Twilightpicklescan · picklescanEPSS 0.47%via OSV

CVE-2025-71351Medium

1y ago

Picklescan missing detection when calling built-in python library function timeit.timeit()

▾ Sunlitpicklescan · picklescanEPSS 0.71%via OSV

CVE-2025-71355Medium

1y ago

Picklescan failed to detect to some unsafe global function in Numpy library

▾ Sunlitpicklescan · picklescanEPSS 0.58%via OSV

CVE-2025-46417High

1y ago

Picklescan Vulnerable to Exfiltration via DNS via linecache and ssl.get_server_certificate

▾ Twilightpicklescan · picklescanEPSS 0.22%via OSV

CVE-2025-1716Critical· 9.8PoC

1y ago

picklescan before 0.0.22 only considers standard pickle file extensions in the scope for its vulnerability scan. An attacker could craft …

picklescan before 0.0.22 only considers standard pickle file extensions in the scope for its vulnerability scan. An attacker could craft a malicious model that uses Pickle and include a malicious pickle file with a non-standard file exte…

▾ Abyssalpicklescan · picklescanEPSS 1.7%via OSV