picklescan has 48 CVEs on record between 2025 and 2026. Disclosures have slowed: 0 in the last 90 days after 14 in the 90 before. The busiest recent month was June 2026 with 14. The median CVSS is 9.8 (critical), with 10 rated critical. None have a confirmed exploitation report. The dominant weakness classes are CWE-502 (7) and CWE-184 (5).

CVEs per month

Weakness classes

Products

Worst active — by depth score

picklescan vulnerabilities

Duplicate Advisory: Picklescan missing detection when calling built-in python library function timeit.timeit()

Duplicate Advisory: Picklescan is missing detection when calling built-in Python cProfile.runctx

Duplicate Advisory: Picklescan is missing detection when calling built-in python idlelib.pyshell.ModifiedInterpreter.runcommand

Duplicate Advisory: Picklescan missing detection when calling pytorch function torch.utils._config_module.load_config

Duplicate Advisory: Picklescan has Incomplete List of Disallowed Inputs

Duplicate Advisory: Picklescan vulnerable to Arbitrary File Writing

Duplicate Advisory: Picklescan does not block ctypes

Duplicate Advisory: Picklescan has pickle parsing logic flaw that leads to malicious pickle file bypass

Duplicate Advisory: Picklescan Bypasses Unsafe Globals Check using pty.spawn

Duplicate Advisory: PickleScan's pkgutil.resolve_name has a universal blocklist bypass

Duplicate Advisory: picklescan has Arbitrary file read using `io.FileIO`

Duplicate Advisory: picklescan missing detection by simple obfuscation of a `builtins.eval` call

Duplicate Advisory: Picklescan (scan_pytorch) Bypass via dynamic eval MAGIC_NUMBER

Duplicate Advisory: PickleScan's profile.run blocklist mismatch allows exec() bypass

PickleScan has multiple stdlib modules with direct RCE not in blocklist

Picklescan (scan_pytorch) Bypass via dynamic eval MAGIC_NUMBER

picklescan vulnerable to arbitrary file create using logging.FileHandler

picklescan missing detection by simple obfuscation of a `builtins.eval` call

picklescan has Arbitrary file read using `io.FileIO`

Picklescan is vulnerable to RCE through missing detection when calling numpy.f2py.crackfortran._eval_length

Picklescan vulnerable to Arbitrary File Writing

Picklescan Bypasses Unsafe Globals Check using pty.spawn

Picklescan has Incomplete List of Disallowed Inputs

Picklescan does not block ctypes

Picklescan is vulnerable to RCE through missing detection when calling numpy.f2py.crackfortran.myeval

Picklescan is missing detection when calling built-in Python cProfile.runctx

Picklescan is missing detection when calling built-in python idlelib.pyshell.ModifiedInterpreter.runcommand

Picklescan is missing detection when calling built-in python ensurepip._run_pip

Picklescan has a missing detection when calling built-in python profile.Profile.run

Picklescan has a missing detection when calling built-in python trace.Trace.runctx