- Latest release
- 1.0.5 (Jul 1, 2026): no advisory affects it
- Newest unaffected release
- 1.0.5 (Jul 1, 2026), the latest release
- Advisories
- 58 · 11 critical, 41 high, 6 medium
- Weekly downloads
- 22.5K
- Dependents
- 3
- Releases
- 41 since 0.0.1 (Sep 5, 2022)
- Registry
- PyPI
- Releases read
- Nov 8, 2026
Version timeline
- CVE-2025-71375Affects 0.0.1 to 0.0.33 (0.0.34 is outside it)
- CVE-2025-71373Affects 0.0.1 to 0.0.32 (0.0.33 is outside it)
- CVE-2025-71372Affects 0.0.1 to 0.0.32 (0.0.33 is outside it)
- CVE-2025-71369Affects 0.0.1 to 0.0.27 (0.0.28 is outside it)
- CVE-2025-71367Affects 0.0.1 to 0.0.33 (0.0.34 is outside it)
- CVE-2025-71366Affects 0.0.1 to 0.0.27 (0.0.28 is outside it)
- CVE-2025-71364Affects 0.0.1 to 0.0.29 (0.0.30 is outside it)
- CVE-2025-71362Affects 0.0.1 to 0.0.32 (0.0.33 is outside it)
- CVE-2025-71360Affects 0.0.1 to 0.0.28 (0.0.29 is outside it)
- CVE-2025-71359Affects 0.0.1 to 0.0.28 (0.0.29 is outside it)
- CVE-2025-71356Affects 0.0.1 to 0.0.27 (0.0.28 is outside it)
- CVE-2025-71353Affects 0.0.1 to 0.0.27 (0.0.28 is outside it)
Show all 58 advisoriesShow fewer advisories
- CVE-2025-71347Affects 0.0.1 to 0.0.32 (0.0.33 is outside it)
- CVE-2025-71345Affects 0.0.1 to 0.0.29 (0.0.30 is outside it)
- CVE-2025-71343Affects 0.0.1 to 0.0.29 (0.0.30 is outside it)
- CVE-2025-71342Affects 0.0.1 to 0.0.29 (0.0.30 is outside it)
- CVE-2025-71374Affects 0.0.1 to 0.0.28 (0.0.29 is outside it)
- CVE-2025-71371Affects 0.0.1 to 0.0.28 (0.0.29 is outside it)
- CVE-2025-71368Affects 0.0.1 to 0.0.29 (0.0.30 is outside it)
- CVE-2025-71363Affects 0.0.1 to 0.0.29 (0.0.30 is outside it)
- CVE-2025-71355Affects 0.0.1 to 0.0.24 (0.0.25 is outside it)
- CVE-2025-71352Affects 0.0.1 to 0.0.28 (0.0.29 is outside it)
- CVE-2025-71350Affects 0.0.1 to 0.0.27 (0.0.28 is outside it)
- CVE-2025-71349Affects 0.0.1 to 0.0.28 (0.0.29 is outside it)
- CVE-2025-71340Affects 0.0.1 to 0.0.29 (0.0.30 is outside it)
- CVE-2025-71361Affects 0.0.1 to 0.0.28 (0.0.29 is outside it)
- CVE-2025-71354Affects 0.0.1 to 0.0.28 (0.0.29 is outside it)
- CVE-2026-56315Affects 0.0.1 to 1.0.3 (1.0.4 is outside it)
- CVE-2025-71376Affects 0.0.1 to 0.0.28 (0.0.29 is outside it)
- CVE-2025-71370Affects 0.0.1 to 0.0.27 (0.0.28 is outside it)
- CVE-2025-71365Affects 0.0.1 to 0.0.32 (0.0.33 is outside it)
- CVE-2025-71341Affects 0.0.1 to 0.0.28 (0.0.29 is outside it)
- CVE-2025-71358Affects 0.0.1 to 0.0.28 (0.0.29 is outside it)
- CVE-2025-71344Affects 0.0.1 to 0.0.29 (0.0.30 is outside it)
- CVE-2025-71339Affects 0.0.1 to 0.0.32 (0.0.33 is outside it)
- CVE-2025-71378Affects 0.0.1 to 0.0.29 (0.0.30 is outside it)
- CVE-2025-71357Affects 0.0.1 to 0.0.29 (0.0.30 is outside it)
- CVE-2025-71351Affects 0.0.1 to 0.0.24 (0.0.25 is outside it)
- CVE-2025-71348Affects 0.0.1 to 0.0.27 (0.0.28 is outside it)
- CVE-2026-56304Affects 0.0.1 to 1.0.0 (1.0.1 is outside it)
- CVE-2026-53875Affects 0.0.1 to 1.0.2 (1.0.3 is outside it)
- CVE-2026-53874Affects 0.0.1 to 1.0.0 (1.0.1 is outside it)
- CVE-2026-53873Affects 0.0.1 to 1.0.3 (1.0.4 is outside it)
- CVE-2026-53872Affects 0.0.1 to 0.0.34 (0.0.35 is outside it)
- CVE-2026-3490Affects 0.0.1 to 1.0.3 (1.0.4 is outside it)
- CVE-2025-71325Affects 0.0.1 to 0.0.26 (0.0.27 is outside it)
- CVE-2025-71323Affects 0.0.1 to 0.0.32 (0.0.33 is outside it)
- CVE-2025-71322Affects 0.0.1 to 0.0.32 (0.0.33 is outside it)
- CVE-2025-71321Affects 0.0.1 to 0.0.32 (0.0.33 is outside it)
- CVE-2025-71320Affects 0.0.1 to 0.0.32 (0.0.33 is outside it)
- CVE-2025-10157Affects 0.0.1 to 0.0.30 (0.0.31 is outside it)
- CVE-2025-10156Affects 0.0.1 to 0.0.30 (0.0.31 is outside it)
- CVE-2025-10155Affects 0.0.1 to 0.0.30 (0.0.31 is outside it)
- CVE-2025-46417Affects 0.0.1 to 0.0.24 (0.0.25 is outside it)
- CVE-2025-1945Affects 0.0.1 to 0.0.22 (0.0.23 is outside it)
- CVE-2025-1944Affects 0.0.1 to 0.0.22 (0.0.23 is outside it)
- CVE-2025-1889Affects 0.0.1 to 0.0.21 (0.0.22 is outside it)
- CVE-2025-1716Affects 0.0.1 to 0.0.21 (0.0.22 is outside it)
Advisories 58
- CVE-2025-71375High 7.6
picklescan - Undetected Remote Code Execution via _operator.methodcaller
Affected: fixed in 0.0.34.
Fixed in 0.0.34 (released Dec 27, 2025, 189 days before disclosure).
The latest release, 1.0.5, is not affected.
- CVE-2025-71373High 7.6
picklescan - Remote Code Execution via operator.methodcaller Detection Bypass
Affected: fixed in 0.0.33.
Fixed in 0.0.33 (released Dec 26, 2025, 190 days before disclosure).
The latest release, 1.0.5, is not affected.
- CVE-2025-71372High 7.6
Picklescan - Arbitrary Code Execution via numpy.f2py.crackfortran.getlincoef Gadget
Affected: fixed in 0.0.33.
Fixed in 0.0.33 (released Dec 26, 2025, 190 days before disclosure).
The latest release, 1.0.5, is not affected.
- CVE-2025-71369High 7.6
picklescan - Unsafe Deserialization via torch.utils.data.datapipes.utils.decoder.basichandlers
Affected: fixed in 0.0.28.
Fixed in 0.0.28 (released Aug 22, 2025, 316 days before disclosure).
The latest release, 1.0.5, is not affected.
- CVE-2025-71367High 7.6
picklescan - Remote Code Execution via _operator.attrgetter Detection Bypass
Affected: fixed in 0.0.34.
Fixed in 0.0.34 (released Dec 27, 2025, 189 days before disclosure).
The latest release, 1.0.5, is not affected.
- CVE-2025-71366High 7.6
picklescan - Arbitrary Code Execution via torch.utils.bottleneck.main.run_cprofile
Affected: fixed in 0.0.28.
Fixed in 0.0.28 (released Aug 22, 2025, 316 days before disclosure).
The latest release, 1.0.5, is not affected.
- CVE-2025-71364High 7.6
picklescan - Arbitrary Code Execution via Undetected asyncio.unix_events._UnixSubprocessTransport._start
Affected: fixed in 0.0.30.
Fixed in 0.0.30 (released Aug 26, 2025, 312 days before disclosure).
The latest release, 1.0.5, is not affected.
- CVE-2025-71362High 7.6
picklescan - Arbitrary Code Execution via Unsafe Deserialization in numpy.f2py.crackfortran
Affected: fixed in 0.0.33.
Fixed in 0.0.33 (released Dec 26, 2025, 190 days before disclosure).
The latest release, 1.0.5, is not affected.
- CVE-2025-71360High 7.6
picklescan - Remote Code Execution via Undetected idlelib.calltip.get_entity
Affected: fixed in 0.0.29.
Fixed in 0.0.29 (released Aug 26, 2025, 312 days before disclosure).
The latest release, 1.0.5, is not affected.
- CVE-2025-71359High 7.6
picklescan - Unsafe Deserialization via lib2to3.pgen2.grammar.Grammar.loads
Affected: fixed in 0.0.29.
Fixed in 0.0.29 (released Aug 26, 2025, 312 days before disclosure).
The latest release, 1.0.5, is not affected.
- CVE-2025-71356High 7.6
picklescan - Arbitrary Code Execution via torch.fx.experimental.symbolic_shapes.ShapeEnv.evaluate_guards_expression
Affected: fixed in 0.0.28.
Fixed in 0.0.28 (released Aug 22, 2025, 316 days before disclosure).
The latest release, 1.0.5, is not affected.
- CVE-2025-71353High 7.6
picklescan - Remote Code Execution via torch._dynamo.guards.GuardBuilder.get
Affected: fixed in 0.0.28.
Fixed in 0.0.28 (released Aug 22, 2025, 316 days before disclosure).
The latest release, 1.0.5, is not affected.
- CVE-2025-71347High 7.6
picklescan - Undetected Remote Code Execution via numpy.f2py.crackfortran.param_eval
Affected: fixed in 0.0.33.
Fixed in 0.0.33 (released Dec 26, 2025, 190 days before disclosure).
The latest release, 1.0.5, is not affected.
- CVE-2025-71345High 7.6
picklescan - Arbitrary Code Execution via torch.utils.bottleneck.main.run_autograd_prof
Affected: fixed in 0.0.30.
Fixed in 0.0.30 (released Aug 26, 2025, 312 days before disclosure).
The latest release, 1.0.5, is not affected.
- CVE-2025-71343High 7.6
picklescan - Arbitrary Code Execution via lib2to3.pgen2.pgen.ParserGenerator.make_label Detection Bypass
Affected: fixed in 0.0.30.
Fixed in 0.0.30 (released Aug 26, 2025, 312 days before disclosure).
The latest release, 1.0.5, is not affected.
Show all 58 advisoriesShow fewer advisories
- CVE-2025-71342High 7.6
picklescan - Undetected Remote Code Execution via idlelib.run.Executive.runcode
Affected: fixed in 0.0.30.
Fixed in 0.0.30 (released Aug 26, 2025, 312 days before disclosure).
The latest release, 1.0.5, is not affected.
- CVE-2025-71374High 7.6
picklescan - Arbitrary Code Execution via Undetected profile.Profile.run
Affected: fixed in 0.0.29.
Fixed in 0.0.29 (released Aug 26, 2025, 308 days before disclosure).
The latest release, 1.0.5, is not affected.
- CVE-2025-71371High 7.6
picklescan - Remote Code Execution via code.InteractiveInterpreter Detection Bypass
Affected: fixed in 0.0.29.
Fixed in 0.0.29 (released Aug 26, 2025, 308 days before disclosure).
The latest release, 1.0.5, is not affected.
- CVE-2025-71368High 7.6
picklescan - Arbitrary Code Execution via Undetected doctest.debug_script
Affected: fixed in 0.0.30.
Fixed in 0.0.30 (released Aug 26, 2025, 308 days before disclosure).
The latest release, 1.0.5, is not affected.
- CVE-2025-71363High 7.6
picklescan - Arbitrary Code Execution via Undetected cProfile.run in Pickle Deserialization
Affected: fixed in 0.0.30.
Fixed in 0.0.30 (released Aug 26, 2025, 308 days before disclosure).
The latest release, 1.0.5, is not affected.
- CVE-2025-71355High 7.6
Picklescan - Arbitrary Code Execution via Unsafe Numpy Function Detection Bypass
Affected: fixed in 0.0.25.
Fixed in 0.0.25 (released Apr 6, 2025, 450 days before disclosure).
The latest release, 1.0.5, is not affected.
- CVE-2025-71352High 7.6
picklescan - Remote Code Execution via Undetected trace.Trace.runctx in Pickle Files
Affected: fixed in 0.0.29.
Fixed in 0.0.29 (released Aug 26, 2025, 308 days before disclosure).
The latest release, 1.0.5, is not affected.
- CVE-2025-71350High 7.6
picklescan - Undetected Remote Code Execution via torch.utils.collect_env.run
Affected: fixed in 0.0.28.
Fixed in 0.0.28 (released Aug 22, 2025, 312 days before disclosure).
The latest release, 1.0.5, is not affected.
- CVE-2025-71349High 7.6
picklescan - Arbitrary Code Execution via Undetected trace.Trace.run in Pickle Files
Affected: fixed in 0.0.29.
Fixed in 0.0.29 (released Aug 26, 2025, 308 days before disclosure).
The latest release, 1.0.5, is not affected.
- CVE-2025-71340High 7.6
picklescan - Remote Code Execution via idlelib.pyshell.ModifiedInterpreter.runcode
Affected: fixed in 0.0.30.
Fixed in 0.0.30 (released Aug 26, 2025, 303 days before disclosure).
The latest release, 1.0.5, is not affected.
- CVE-2025-71361High 7.6
picklescan - Remote Code Execution via Undetected idlelib.calltip.Calltip.fetch_tip
Affected: fixed in 0.0.29.
Fixed in 0.0.29 (released Aug 26, 2025, 302 days before disclosure).
The latest release, 1.0.5, is not affected.
- CVE-2025-71354High 7.6
picklescan - Remote Code Execution via idlelib.debugobj.ObjectTreeItem.SetText
Affected: fixed in 0.0.29.
Fixed in 0.0.29 (released Aug 26, 2025, 302 days before disclosure).
The latest release, 1.0.5, is not affected.
- CVE-2026-56315Critical 9.3
picklescan - Remote Code Execution via Unblocked Standard Library Modules
Affected: fixed in 1.0.4.
Fixed in 1.0.4 (released Mar 2, 2026, 113 days before disclosure).
The latest release, 1.0.5, is not affected.
- CVE-2025-71376High 7.6
picklescan - Arbitrary Code Execution via Undetected idlelib.autocomplete.AutoComplete.fetch_completions
Affected: fixed in 0.0.29.
Fixed in 0.0.29 (released Aug 26, 2025, 301 days before disclosure).
The latest release, 1.0.5, is not affected.
- CVE-2025-71370High 7.6
picklescan - Remote Code Execution via torch.jit.unsupported_tensor_ops.execWrapper
Affected: fixed in 0.0.28.
Fixed in 0.0.28 (released Aug 22, 2025, 305 days before disclosure).
The latest release, 1.0.5, is not affected.
- CVE-2025-71365High 7.6
picklescan - Arbitrary Code Execution via numpy.f2py.crackfortran.myeval Detection Bypass
Affected: fixed in 0.0.33.
Fixed in 0.0.33 (released Dec 26, 2025, 179 days before disclosure).
The latest release, 1.0.5, is not affected.
- CVE-2025-71341High 7.6
picklescan - Remote Code Execution via Undetected profile.Profile.runctx
Affected: fixed in 0.0.29.
Fixed in 0.0.29 (released Aug 26, 2025, 301 days before disclosure).
The latest release, 1.0.5, is not affected.
- CVE-2025-71358High 7.6
picklescan - Remote Code Execution via idlelib.autocomplete.AutoComplete.get_entity
Affected: fixed in 0.0.29.
Fixed in 0.0.29 (released Aug 26, 2025, 300 days before disclosure).
The latest release, 1.0.5, is not affected.
- CVE-2025-71344High 7.6
picklescan - Arbitrary Code Execution via Undetected ensurepip._run_pip Function
Affected: fixed in 0.0.30.
Fixed in 0.0.30 (released Aug 26, 2025, 300 days before disclosure).
The latest release, 1.0.5, is not affected.
- CVE-2025-71339High 7.6
Picklescan - Arbitrary Code Execution via numpy.f2py.crackfortran._eval_length Gadget
Affected: fixed in 0.0.33.
Fixed in 0.0.33 (released Dec 26, 2025, 178 days before disclosure).
The latest release, 1.0.5, is not affected.
- CVE-2025-71378High 7.6
picklescan - Remote Code Execution via Undetected cProfile.runctx in Pickle Files
Affected: fixed in 0.0.30.
Fixed in 0.0.30 (released Aug 26, 2025, 299 days before disclosure).
The latest release, 1.0.5, is not affected.
- CVE-2025-71357High 7.6
picklescan - Arbitrary Code Execution via Undetected idlelib.pyshell.ModifiedInterpreter.runcommand
Affected: fixed in 0.0.30.
Fixed in 0.0.30 (released Aug 26, 2025, 299 days before disclosure).
The latest release, 1.0.5, is not affected.
- CVE-2025-71351High 7.6
picklescan - Remote Code Execution via timeit.timeit() Detection Bypass
Affected: fixed in 0.0.25.
Fixed in 0.0.25 (released Apr 6, 2025, 441 days before disclosure).
The latest release, 1.0.5, is not affected.
- CVE-2025-71348High 7.6
picklescan - Arbitrary Code Execution via torch.utils._config_module.load_config Bypass
Affected: fixed in 0.0.28.
Fixed in 0.0.28 (released Aug 22, 2025, 303 days before disclosure).
The latest release, 1.0.5, is not affected.
- CVE-2026-56304Medium 6.9
picklescan - Arbitrary File Creation via logging.FileHandler Deserialization
Affected: fixed in 1.0.1.
Fixed in 1.0.1 (released Feb 2, 2026, 138 days before disclosure).
The latest release, 1.0.5, is not affected.
- CVE-2026-53875High 7.1
picklescan - Scanning Bypass via Dynamic Eval in scan_pytorch
Affected: fixed in 1.0.3.
Fixed in 1.0.3 (released Feb 16, 2026, 121 days before disclosure).
The latest release, 1.0.5, is not affected.
- CVE-2026-53874Critical 9.3
picklescan - Arbitrary Code Execution via Obfuscated eval Call
Affected: fixed in 1.0.1.
Fixed in 1.0.1 (released Feb 2, 2026, 135 days before disclosure).
The latest release, 1.0.5, is not affected.
- CVE-2026-53873Critical 9.3
picklescan - Arbitrary Code Execution via profile.run() Blocklist Bypass
Affected: fixed in 1.0.4.
Fixed in 1.0.4 (released Mar 2, 2026, 107 days before disclosure).
The latest release, 1.0.5, is not affected.
- CVE-2026-53872High 8.7
picklescan - Arbitrary File Read via Unsafe Pickle Deserialization
Affected: fixed in 0.0.35.
Fixed in 0.0.35 (released Jan 7, 2026, 161 days before disclosure).
The latest release, 1.0.5, is not affected.
- CVE-2026-3490Critical 10.0
picklescan - Universal Blocklist Bypass via pkgutil.resolve_name
Affected: fixed in 1.0.4.
Fixed in 1.0.4 (released Mar 2, 2026, 107 days before disclosure).
The latest release, 1.0.5, is not affected.
- CVE-2025-71325Critical 9.3
picklescan - Detection Bypass via STACK_GLOBAL Opcode Parsing Logic Flaw
Affected: fixed in 0.0.27.
Fixed in 0.0.27 (released Aug 10, 2025, 311 days before disclosure).
The latest release, 1.0.5, is not affected.
- CVE-2025-71323Critical 9.3
picklescan - Remote Code Execution via Unblocked ctypes Module
Affected: fixed in 0.0.33.
Fixed in 0.0.33 (released Dec 26, 2025, 173 days before disclosure).
The latest release, 1.0.5, is not affected.
- CVE-2025-71322High 8.7
PickleScan - Unsafe Globals Check Bypass via pty.spawn Function
Affected: fixed in 0.0.33.
Fixed in 0.0.33 (released Dec 26, 2025, 173 days before disclosure).
The latest release, 1.0.5, is not affected.
- CVE-2025-71321Critical 9.3
picklescan - Arbitrary File Writing via distutils Module Bypass
Affected: fixed in 0.0.33.
Fixed in 0.0.33 (released Dec 26, 2025, 173 days before disclosure).
The latest release, 1.0.5, is not affected.
- CVE-2025-71320Critical 9.3
picklescan - Remote Code Execution via Incomplete Disallowed Inputs
Affected: fixed in 0.0.33.
Fixed in 0.0.33 (released Dec 26, 2025, 173 days before disclosure).
The latest release, 1.0.5, is not affected.
- CVE-2025-10157Critical 9.3
PickleScan Bypasses Unsafe Globals Check Using Submodule Imports
Affected: fixed in 0.0.31.
Fixed in 0.0.31 (released Sep 8, 2025, 9 days before disclosure).
The latest release, 1.0.5, is not affected.
- CVE-2025-10156Critical 9.3
PickleScan Security Bypass via Bad CRC in ZIP Archive
Affected: fixed in 0.0.31.
Fixed in 0.0.31 (released Sep 8, 2025, 9 days before disclosure).
The latest release, 1.0.5, is not affected.
- CVE-2025-10155Critical 9.3
PickleScan Security Bypass Using Misleading File Extension
Affected: fixed in 0.0.31.
Fixed in 0.0.31 (released Sep 8, 2025, 9 days before disclosure).
The latest release, 1.0.5, is not affected.
- CVE-2025-46417Medium 6.8
The unsafe globals in Picklescan before 0.0.25 do not include ssl.
Affected: fixed in 0.0.25.
Fixed in 0.0.25 (released Apr 6, 2025, 18 days before disclosure).
The latest release, 1.0.5, is not affected.
- CVE-2025-1945Medium 5.3
picklescan - Zip Flag Bit Exploit Crashes Picklescan But Not PyTorch
Affected: fixed in 0.0.23.
Fixed in 0.0.23 (released Mar 9, 2025, 1 day before disclosure).
The latest release, 1.0.5, is not affected.
- CVE-2025-1944Medium 5.3
picklescan ZIP archive manipulation attack leads to crash
Affected: fixed in 0.0.23.
Fixed in 0.0.23 (released Mar 9, 2025, 1 day before disclosure).
The latest release, 1.0.5, is not affected.
- CVE-2025-1889Medium 5.3
picklescan - Security scanning bypass via non-standard file extensions
Affected: from 0.0.1, through 0.0.21; fixed in 0.0.22; fixed in 0.0.21.
Fixed in 0.0.22 (released Mar 6, 2025, 3 days after disclosure).
The latest release, 1.0.5, is not affected.
- CVE-2025-1716Medium 5.3
picklescan - Security scanning bypass via 'pip main'
Affected: fixed in 0.0.22; fixed in 0.0.21.
Fixed in 0.0.22 (released Mar 6, 2025, 8 days after disclosure).
The latest release, 1.0.5, is not affected.