# picklescan (PyPI) vulnerabilities 58 known vulnerabilities (11 critical, 41 high, 6 medium), with the versions each affects and the releases that fix them. ## At a glance - Latest release: 1.0.5 (Jul 1, 2026): no advisory affects it - Newest unaffected release: 1.0.5 (Jul 1, 2026), the latest release - Weekly downloads: 22.5K - Dependents: 3 - Releases: 41 since 0.0.1 (Sep 5, 2022) - Registry: https://pypi.org/project/picklescan/ - Releases read: Nov 8, 2026 ## Version timeline Affected versions per advisory, in version order: - CVE-2025-71375: 0.0.1 to 0.0.33 (0.0.34 is outside it) - CVE-2025-71373: 0.0.1 to 0.0.32 (0.0.33 is outside it) - CVE-2025-71372: 0.0.1 to 0.0.32 (0.0.33 is outside it) - CVE-2025-71369: 0.0.1 to 0.0.27 (0.0.28 is outside it) - CVE-2025-71367: 0.0.1 to 0.0.33 (0.0.34 is outside it) - CVE-2025-71366: 0.0.1 to 0.0.27 (0.0.28 is outside it) - CVE-2025-71364: 0.0.1 to 0.0.29 (0.0.30 is outside it) - CVE-2025-71362: 0.0.1 to 0.0.32 (0.0.33 is outside it) - CVE-2025-71360: 0.0.1 to 0.0.28 (0.0.29 is outside it) - CVE-2025-71359: 0.0.1 to 0.0.28 (0.0.29 is outside it) - CVE-2025-71356: 0.0.1 to 0.0.27 (0.0.28 is outside it) - CVE-2025-71353: 0.0.1 to 0.0.27 (0.0.28 is outside it) - CVE-2025-71347: 0.0.1 to 0.0.32 (0.0.33 is outside it) - CVE-2025-71345: 0.0.1 to 0.0.29 (0.0.30 is outside it) - CVE-2025-71343: 0.0.1 to 0.0.29 (0.0.30 is outside it) - CVE-2025-71342: 0.0.1 to 0.0.29 (0.0.30 is outside it) - CVE-2025-71374: 0.0.1 to 0.0.28 (0.0.29 is outside it) - CVE-2025-71371: 0.0.1 to 0.0.28 (0.0.29 is outside it) - CVE-2025-71368: 0.0.1 to 0.0.29 (0.0.30 is outside it) - CVE-2025-71363: 0.0.1 to 0.0.29 (0.0.30 is outside it) - CVE-2025-71355: 0.0.1 to 0.0.24 (0.0.25 is outside it) - CVE-2025-71352: 0.0.1 to 0.0.28 (0.0.29 is outside it) - CVE-2025-71350: 0.0.1 to 0.0.27 (0.0.28 is outside it) - CVE-2025-71349: 0.0.1 to 0.0.28 (0.0.29 is outside it) - CVE-2025-71340: 0.0.1 to 0.0.29 (0.0.30 is outside it) - CVE-2025-71361: 0.0.1 to 0.0.28 (0.0.29 is outside it) - CVE-2025-71354: 0.0.1 to 0.0.28 (0.0.29 is outside it) - CVE-2026-56315: 0.0.1 to 1.0.3 (1.0.4 is outside it) - CVE-2025-71376: 0.0.1 to 0.0.28 (0.0.29 is outside it) - CVE-2025-71370: 0.0.1 to 0.0.27 (0.0.28 is outside it) - CVE-2025-71365: 0.0.1 to 0.0.32 (0.0.33 is outside it) - CVE-2025-71341: 0.0.1 to 0.0.28 (0.0.29 is outside it) - CVE-2025-71358: 0.0.1 to 0.0.28 (0.0.29 is outside it) - CVE-2025-71344: 0.0.1 to 0.0.29 (0.0.30 is outside it) - CVE-2025-71339: 0.0.1 to 0.0.32 (0.0.33 is outside it) - CVE-2025-71378: 0.0.1 to 0.0.29 (0.0.30 is outside it) - CVE-2025-71357: 0.0.1 to 0.0.29 (0.0.30 is outside it) - CVE-2025-71351: 0.0.1 to 0.0.24 (0.0.25 is outside it) - CVE-2025-71348: 0.0.1 to 0.0.27 (0.0.28 is outside it) - CVE-2026-56304: 0.0.1 to 1.0.0 (1.0.1 is outside it) - CVE-2026-53875: 0.0.1 to 1.0.2 (1.0.3 is outside it) - CVE-2026-53874: 0.0.1 to 1.0.0 (1.0.1 is outside it) - CVE-2026-53873: 0.0.1 to 1.0.3 (1.0.4 is outside it) - CVE-2026-53872: 0.0.1 to 0.0.34 (0.0.35 is outside it) - CVE-2026-3490: 0.0.1 to 1.0.3 (1.0.4 is outside it) - CVE-2025-71325: 0.0.1 to 0.0.26 (0.0.27 is outside it) - CVE-2025-71323: 0.0.1 to 0.0.32 (0.0.33 is outside it) - CVE-2025-71322: 0.0.1 to 0.0.32 (0.0.33 is outside it) - CVE-2025-71321: 0.0.1 to 0.0.32 (0.0.33 is outside it) - CVE-2025-71320: 0.0.1 to 0.0.32 (0.0.33 is outside it) - CVE-2025-10157: 0.0.1 to 0.0.30 (0.0.31 is outside it) - CVE-2025-10156: 0.0.1 to 0.0.30 (0.0.31 is outside it) - CVE-2025-10155: 0.0.1 to 0.0.30 (0.0.31 is outside it) - CVE-2025-46417: 0.0.1 to 0.0.24 (0.0.25 is outside it) - CVE-2025-1945: 0.0.1 to 0.0.22 (0.0.23 is outside it) - CVE-2025-1944: 0.0.1 to 0.0.22 (0.0.23 is outside it) - CVE-2025-1889: 0.0.1 to 0.0.21 (0.0.22 is outside it) - CVE-2025-1716: 0.0.1 to 0.0.21 (0.0.22 is outside it) ## Advisories (58) ### [CVE-2025-71375](https://cve.now/CVE-2025-71375): picklescan - Undetected Remote Code Execution via \_operator.methodcaller - Severity: High 7.6 - Published: Jul 4, 2026 - Affected: fixed in 0.0.34. - Fixed in 0.0.34 (released Dec 27, 2025, 189 days before disclosure). - The latest release, 1.0.5, is not affected. ### [CVE-2025-71373](https://cve.now/CVE-2025-71373): picklescan - Remote Code Execution via operator.methodcaller Detection Bypass - Severity: High 7.6 - Published: Jul 4, 2026 - Affected: fixed in 0.0.33. - Fixed in 0.0.33 (released Dec 26, 2025, 190 days before disclosure). - The latest release, 1.0.5, is not affected. ### [CVE-2025-71372](https://cve.now/CVE-2025-71372): Picklescan - Arbitrary Code Execution via numpy.f2py.crackfortran.getlincoef Gadget - Severity: High 7.6 - Published: Jul 4, 2026 - Affected: fixed in 0.0.33. - Fixed in 0.0.33 (released Dec 26, 2025, 190 days before disclosure). - The latest release, 1.0.5, is not affected. ### [CVE-2025-71369](https://cve.now/CVE-2025-71369): picklescan - Unsafe Deserialization via torch.utils.data.datapipes.utils.decoder.basichandlers - Severity: High 7.6 - Published: Jul 4, 2026 - Affected: fixed in 0.0.28. - Fixed in 0.0.28 (released Aug 22, 2025, 316 days before disclosure). - The latest release, 1.0.5, is not affected. ### [CVE-2025-71367](https://cve.now/CVE-2025-71367): picklescan - Remote Code Execution via \_operator.attrgetter Detection Bypass - Severity: High 7.6 - Published: Jul 4, 2026 - Affected: fixed in 0.0.34. - Fixed in 0.0.34 (released Dec 27, 2025, 189 days before disclosure). - The latest release, 1.0.5, is not affected. ### [CVE-2025-71366](https://cve.now/CVE-2025-71366): picklescan - Arbitrary Code Execution via torch.utils.bottleneck.main.run\_cprofile - Severity: High 7.6 - Published: Jul 4, 2026 - Affected: fixed in 0.0.28. - Fixed in 0.0.28 (released Aug 22, 2025, 316 days before disclosure). - The latest release, 1.0.5, is not affected. ### [CVE-2025-71364](https://cve.now/CVE-2025-71364): picklescan - Arbitrary Code Execution via Undetected asyncio.unix\_events.\_UnixSubprocessTransport.\_start - Severity: High 7.6 - Published: Jul 4, 2026 - Affected: fixed in 0.0.30. - Fixed in 0.0.30 (released Aug 26, 2025, 312 days before disclosure). - The latest release, 1.0.5, is not affected. ### [CVE-2025-71362](https://cve.now/CVE-2025-71362): picklescan - Arbitrary Code Execution via Unsafe Deserialization in numpy.f2py.crackfortran - Severity: High 7.6 - Published: Jul 4, 2026 - Affected: fixed in 0.0.33. - Fixed in 0.0.33 (released Dec 26, 2025, 190 days before disclosure). - The latest release, 1.0.5, is not affected. ### [CVE-2025-71360](https://cve.now/CVE-2025-71360): picklescan - Remote Code Execution via Undetected idlelib.calltip.get\_entity - Severity: High 7.6 - Published: Jul 4, 2026 - Affected: fixed in 0.0.29. - Fixed in 0.0.29 (released Aug 26, 2025, 312 days before disclosure). - The latest release, 1.0.5, is not affected. ### [CVE-2025-71359](https://cve.now/CVE-2025-71359): picklescan - Unsafe Deserialization via lib2to3.pgen2.grammar.Grammar.loads - Severity: High 7.6 - Published: Jul 4, 2026 - Affected: fixed in 0.0.29. - Fixed in 0.0.29 (released Aug 26, 2025, 312 days before disclosure). - The latest release, 1.0.5, is not affected. ### [CVE-2025-71356](https://cve.now/CVE-2025-71356): picklescan - Arbitrary Code Execution via torch.fx.experimental.symbolic\_shapes.ShapeEnv.evaluate\_guards\_expression - Severity: High 7.6 - Published: Jul 4, 2026 - Affected: fixed in 0.0.28. - Fixed in 0.0.28 (released Aug 22, 2025, 316 days before disclosure). - The latest release, 1.0.5, is not affected. ### [CVE-2025-71353](https://cve.now/CVE-2025-71353): picklescan - Remote Code Execution via torch.\_dynamo.guards.GuardBuilder.get - Severity: High 7.6 - Published: Jul 4, 2026 - Affected: fixed in 0.0.28. - Fixed in 0.0.28 (released Aug 22, 2025, 316 days before disclosure). - The latest release, 1.0.5, is not affected. ### [CVE-2025-71347](https://cve.now/CVE-2025-71347): picklescan - Undetected Remote Code Execution via numpy.f2py.crackfortran.param\_eval - Severity: High 7.6 - Published: Jul 4, 2026 - Affected: fixed in 0.0.33. - Fixed in 0.0.33 (released Dec 26, 2025, 190 days before disclosure). - The latest release, 1.0.5, is not affected. ### [CVE-2025-71345](https://cve.now/CVE-2025-71345): picklescan - Arbitrary Code Execution via torch.utils.bottleneck.main.run\_autograd\_prof - Severity: High 7.6 - Published: Jul 4, 2026 - Affected: fixed in 0.0.30. - Fixed in 0.0.30 (released Aug 26, 2025, 312 days before disclosure). - The latest release, 1.0.5, is not affected. ### [CVE-2025-71343](https://cve.now/CVE-2025-71343): picklescan - Arbitrary Code Execution via lib2to3.pgen2.pgen.ParserGenerator.make\_label Detection Bypass - Severity: High 7.6 - Published: Jul 4, 2026 - Affected: fixed in 0.0.30. - Fixed in 0.0.30 (released Aug 26, 2025, 312 days before disclosure). - The latest release, 1.0.5, is not affected. ### [CVE-2025-71342](https://cve.now/CVE-2025-71342): picklescan - Undetected Remote Code Execution via idlelib.run.Executive.runcode - Severity: High 7.6 - Published: Jul 4, 2026 - Affected: fixed in 0.0.30. - Fixed in 0.0.30 (released Aug 26, 2025, 312 days before disclosure). - The latest release, 1.0.5, is not affected. ### [CVE-2025-71374](https://cve.now/CVE-2025-71374): picklescan - Arbitrary Code Execution via Undetected profile.Profile.run - Severity: High 7.6 - Published: Jun 30, 2026 - Affected: fixed in 0.0.29. - Fixed in 0.0.29 (released Aug 26, 2025, 308 days before disclosure). - The latest release, 1.0.5, is not affected. ### [CVE-2025-71371](https://cve.now/CVE-2025-71371): picklescan - Remote Code Execution via code.InteractiveInterpreter Detection Bypass - Severity: High 7.6 - Published: Jun 30, 2026 - Affected: fixed in 0.0.29. - Fixed in 0.0.29 (released Aug 26, 2025, 308 days before disclosure). - The latest release, 1.0.5, is not affected. ### [CVE-2025-71368](https://cve.now/CVE-2025-71368): picklescan - Arbitrary Code Execution via Undetected doctest.debug\_script - Severity: High 7.6 - Published: Jun 30, 2026 - Affected: fixed in 0.0.30. - Fixed in 0.0.30 (released Aug 26, 2025, 308 days before disclosure). - The latest release, 1.0.5, is not affected. ### [CVE-2025-71363](https://cve.now/CVE-2025-71363): picklescan - Arbitrary Code Execution via Undetected cProfile.run in Pickle Deserialization - Severity: High 7.6 - Published: Jun 30, 2026 - Affected: fixed in 0.0.30. - Fixed in 0.0.30 (released Aug 26, 2025, 308 days before disclosure). - The latest release, 1.0.5, is not affected. ### [CVE-2025-71355](https://cve.now/CVE-2025-71355): Picklescan - Arbitrary Code Execution via Unsafe Numpy Function Detection Bypass - Severity: High 7.6 - Published: Jun 30, 2026 - Affected: fixed in 0.0.25. - Fixed in 0.0.25 (released Apr 6, 2025, 450 days before disclosure). - The latest release, 1.0.5, is not affected. ### [CVE-2025-71352](https://cve.now/CVE-2025-71352): picklescan - Remote Code Execution via Undetected trace.Trace.runctx in Pickle Files - Severity: High 7.6 - Published: Jun 30, 2026 - Affected: fixed in 0.0.29. - Fixed in 0.0.29 (released Aug 26, 2025, 308 days before disclosure). - The latest release, 1.0.5, is not affected. ### [CVE-2025-71350](https://cve.now/CVE-2025-71350): picklescan - Undetected Remote Code Execution via torch.utils.collect\_env.run - Severity: High 7.6 - Published: Jun 30, 2026 - Affected: fixed in 0.0.28. - Fixed in 0.0.28 (released Aug 22, 2025, 312 days before disclosure). - The latest release, 1.0.5, is not affected. ### [CVE-2025-71349](https://cve.now/CVE-2025-71349): picklescan - Arbitrary Code Execution via Undetected trace.Trace.run in Pickle Files - Severity: High 7.6 - Published: Jun 30, 2026 - Affected: fixed in 0.0.29. - Fixed in 0.0.29 (released Aug 26, 2025, 308 days before disclosure). - The latest release, 1.0.5, is not affected. ### [CVE-2025-71340](https://cve.now/CVE-2025-71340): picklescan - Remote Code Execution via idlelib.pyshell.ModifiedInterpreter.runcode - Severity: High 7.6 - Published: Jun 25, 2026 - Affected: fixed in 0.0.30. - Fixed in 0.0.30 (released Aug 26, 2025, 303 days before disclosure). - The latest release, 1.0.5, is not affected. ### [CVE-2025-71361](https://cve.now/CVE-2025-71361): picklescan - Remote Code Execution via Undetected idlelib.calltip.Calltip.fetch\_tip - Severity: High 7.6 - Published: Jun 24, 2026 - Affected: fixed in 0.0.29. - Fixed in 0.0.29 (released Aug 26, 2025, 302 days before disclosure). - The latest release, 1.0.5, is not affected. ### [CVE-2025-71354](https://cve.now/CVE-2025-71354): picklescan - Remote Code Execution via idlelib.debugobj.ObjectTreeItem.SetText - Severity: High 7.6 - Published: Jun 24, 2026 - Affected: fixed in 0.0.29. - Fixed in 0.0.29 (released Aug 26, 2025, 302 days before disclosure). - The latest release, 1.0.5, is not affected. ### [CVE-2026-56315](https://cve.now/CVE-2026-56315): picklescan - Remote Code Execution via Unblocked Standard Library Modules - Severity: Critical 9.3 - Published: Jun 23, 2026 - Affected: fixed in 1.0.4. - Fixed in 1.0.4 (released Mar 2, 2026, 113 days before disclosure). - The latest release, 1.0.5, is not affected. ### [CVE-2025-71376](https://cve.now/CVE-2025-71376): picklescan - Arbitrary Code Execution via Undetected idlelib.autocomplete.AutoComplete.fetch\_completions - Severity: High 7.6 - Published: Jun 23, 2026 - Affected: fixed in 0.0.29. - Fixed in 0.0.29 (released Aug 26, 2025, 301 days before disclosure). - The latest release, 1.0.5, is not affected. ### [CVE-2025-71370](https://cve.now/CVE-2025-71370): picklescan - Remote Code Execution via torch.jit.unsupported\_tensor\_ops.execWrapper - Severity: High 7.6 - Published: Jun 23, 2026 - Affected: fixed in 0.0.28. - Fixed in 0.0.28 (released Aug 22, 2025, 305 days before disclosure). - The latest release, 1.0.5, is not affected. ### [CVE-2025-71365](https://cve.now/CVE-2025-71365): picklescan - Arbitrary Code Execution via numpy.f2py.crackfortran.myeval Detection Bypass - Severity: High 7.6 - Published: Jun 23, 2026 - Affected: fixed in 0.0.33. - Fixed in 0.0.33 (released Dec 26, 2025, 179 days before disclosure). - The latest release, 1.0.5, is not affected. ### [CVE-2025-71341](https://cve.now/CVE-2025-71341): picklescan - Remote Code Execution via Undetected profile.Profile.runctx - Severity: High 7.6 - Published: Jun 23, 2026 - Affected: fixed in 0.0.29. - Fixed in 0.0.29 (released Aug 26, 2025, 301 days before disclosure). - The latest release, 1.0.5, is not affected. ### [CVE-2025-71358](https://cve.now/CVE-2025-71358): picklescan - Remote Code Execution via idlelib.autocomplete.AutoComplete.get\_entity - Severity: High 7.6 - Published: Jun 22, 2026 - Affected: fixed in 0.0.29. - Fixed in 0.0.29 (released Aug 26, 2025, 300 days before disclosure). - The latest release, 1.0.5, is not affected. ### [CVE-2025-71344](https://cve.now/CVE-2025-71344): picklescan - Arbitrary Code Execution via Undetected ensurepip.\_run\_pip Function - Severity: High 7.6 - Published: Jun 22, 2026 - Affected: fixed in 0.0.30. - Fixed in 0.0.30 (released Aug 26, 2025, 300 days before disclosure). - The latest release, 1.0.5, is not affected. ### [CVE-2025-71339](https://cve.now/CVE-2025-71339): Picklescan - Arbitrary Code Execution via numpy.f2py.crackfortran.\_eval\_length Gadget - Severity: High 7.6 - Published: Jun 22, 2026 - Affected: fixed in 0.0.33. - Fixed in 0.0.33 (released Dec 26, 2025, 178 days before disclosure). - The latest release, 1.0.5, is not affected. ### [CVE-2025-71378](https://cve.now/CVE-2025-71378): picklescan - Remote Code Execution via Undetected cProfile.runctx in Pickle Files - Severity: High 7.6 - Published: Jun 21, 2026 - Affected: fixed in 0.0.30. - Fixed in 0.0.30 (released Aug 26, 2025, 299 days before disclosure). - The latest release, 1.0.5, is not affected. ### [CVE-2025-71357](https://cve.now/CVE-2025-71357): picklescan - Arbitrary Code Execution via Undetected idlelib.pyshell.ModifiedInterpreter.runcommand - Severity: High 7.6 - Published: Jun 21, 2026 - Affected: fixed in 0.0.30. - Fixed in 0.0.30 (released Aug 26, 2025, 299 days before disclosure). - The latest release, 1.0.5, is not affected. ### [CVE-2025-71351](https://cve.now/CVE-2025-71351): picklescan - Remote Code Execution via timeit.timeit() Detection Bypass - Severity: High 7.6 - Published: Jun 21, 2026 - Affected: fixed in 0.0.25. - Fixed in 0.0.25 (released Apr 6, 2025, 441 days before disclosure). - The latest release, 1.0.5, is not affected. ### [CVE-2025-71348](https://cve.now/CVE-2025-71348): picklescan - Arbitrary Code Execution via torch.utils.\_config\_module.load\_config Bypass - Severity: High 7.6 - Published: Jun 21, 2026 - Affected: fixed in 0.0.28. - Fixed in 0.0.28 (released Aug 22, 2025, 303 days before disclosure). - The latest release, 1.0.5, is not affected. ### [CVE-2026-56304](https://cve.now/CVE-2026-56304): picklescan - Arbitrary File Creation via logging.FileHandler Deserialization - Severity: Medium 6.9 - Published: Jun 20, 2026 - Affected: fixed in 1.0.1. - Fixed in 1.0.1 (released Feb 2, 2026, 138 days before disclosure). - The latest release, 1.0.5, is not affected. ### [CVE-2026-53875](https://cve.now/CVE-2026-53875): picklescan - Scanning Bypass via Dynamic Eval in scan\_pytorch - Severity: High 7.1 - Published: Jun 17, 2026 - Affected: fixed in 1.0.3. - Fixed in 1.0.3 (released Feb 16, 2026, 121 days before disclosure). - The latest release, 1.0.5, is not affected. ### [CVE-2026-53874](https://cve.now/CVE-2026-53874): picklescan - Arbitrary Code Execution via Obfuscated eval Call - Severity: Critical 9.3 - Published: Jun 17, 2026 - Affected: fixed in 1.0.1. - Fixed in 1.0.1 (released Feb 2, 2026, 135 days before disclosure). - The latest release, 1.0.5, is not affected. ### [CVE-2026-53873](https://cve.now/CVE-2026-53873): picklescan - Arbitrary Code Execution via profile.run() Blocklist Bypass - Severity: Critical 9.3 - Published: Jun 17, 2026 - Affected: fixed in 1.0.4. - Fixed in 1.0.4 (released Mar 2, 2026, 107 days before disclosure). - The latest release, 1.0.5, is not affected. ### [CVE-2026-53872](https://cve.now/CVE-2026-53872): picklescan - Arbitrary File Read via Unsafe Pickle Deserialization - Severity: High 8.7 - Published: Jun 17, 2026 - Affected: fixed in 0.0.35. - Fixed in 0.0.35 (released Jan 7, 2026, 161 days before disclosure). - The latest release, 1.0.5, is not affected. ### [CVE-2026-3490](https://cve.now/CVE-2026-3490): picklescan - Universal Blocklist Bypass via pkgutil.resolve\_name - Severity: Critical 10.0 - Published: Jun 17, 2026 - Affected: fixed in 1.0.4. - Fixed in 1.0.4 (released Mar 2, 2026, 107 days before disclosure). - The latest release, 1.0.5, is not affected. ### [CVE-2025-71325](https://cve.now/CVE-2025-71325): picklescan - Detection Bypass via STACK\_GLOBAL Opcode Parsing Logic Flaw - Severity: Critical 9.3 - Published: Jun 17, 2026 - Affected: fixed in 0.0.27. - Fixed in 0.0.27 (released Aug 10, 2025, 311 days before disclosure). - The latest release, 1.0.5, is not affected. ### [CVE-2025-71323](https://cve.now/CVE-2025-71323): picklescan - Remote Code Execution via Unblocked ctypes Module - Severity: Critical 9.3 - Published: Jun 17, 2026 - Affected: fixed in 0.0.33. - Fixed in 0.0.33 (released Dec 26, 2025, 173 days before disclosure). - The latest release, 1.0.5, is not affected. ### [CVE-2025-71322](https://cve.now/CVE-2025-71322): PickleScan - Unsafe Globals Check Bypass via pty.spawn Function - Severity: High 8.7 - Published: Jun 17, 2026 - Affected: fixed in 0.0.33. - Fixed in 0.0.33 (released Dec 26, 2025, 173 days before disclosure). - The latest release, 1.0.5, is not affected. ### [CVE-2025-71321](https://cve.now/CVE-2025-71321): picklescan - Arbitrary File Writing via distutils Module Bypass - Severity: Critical 9.3 - Published: Jun 17, 2026 - Affected: fixed in 0.0.33. - Fixed in 0.0.33 (released Dec 26, 2025, 173 days before disclosure). - The latest release, 1.0.5, is not affected. ### [CVE-2025-71320](https://cve.now/CVE-2025-71320): picklescan - Remote Code Execution via Incomplete Disallowed Inputs - Severity: Critical 9.3 - Published: Jun 17, 2026 - Affected: fixed in 0.0.33. - Fixed in 0.0.33 (released Dec 26, 2025, 173 days before disclosure). - The latest release, 1.0.5, is not affected. ### [CVE-2025-10157](https://cve.now/CVE-2025-10157): PickleScan Bypasses Unsafe Globals Check Using Submodule Imports - Severity: Critical 9.3 - Published: Sep 17, 2025 - Affected: fixed in 0.0.31. - Fixed in 0.0.31 (released Sep 8, 2025, 9 days before disclosure). - The latest release, 1.0.5, is not affected. ### [CVE-2025-10156](https://cve.now/CVE-2025-10156): PickleScan Security Bypass via Bad CRC in ZIP Archive - Severity: Critical 9.3 - Published: Sep 17, 2025 - Affected: fixed in 0.0.31. - Fixed in 0.0.31 (released Sep 8, 2025, 9 days before disclosure). - The latest release, 1.0.5, is not affected. ### [CVE-2025-10155](https://cve.now/CVE-2025-10155): PickleScan Security Bypass Using Misleading File Extension - Severity: Critical 9.3 - Published: Sep 17, 2025 - Affected: fixed in 0.0.31. - Fixed in 0.0.31 (released Sep 8, 2025, 9 days before disclosure). - The latest release, 1.0.5, is not affected. ### [CVE-2025-46417](https://cve.now/CVE-2025-46417): The unsafe globals in Picklescan before 0.0.25 do not include ssl. - Severity: Medium 6.8 - Published: Apr 24, 2025 - Affected: fixed in 0.0.25. - Fixed in 0.0.25 (released Apr 6, 2025, 18 days before disclosure). - The latest release, 1.0.5, is not affected. ### [CVE-2025-1945](https://cve.now/CVE-2025-1945): picklescan - Zip Flag Bit Exploit Crashes Picklescan But Not PyTorch - Severity: Medium 5.3 - Published: Mar 10, 2025 - Affected: fixed in 0.0.23. - Fixed in 0.0.23 (released Mar 9, 2025, 1 day before disclosure). - The latest release, 1.0.5, is not affected. ### [CVE-2025-1944](https://cve.now/CVE-2025-1944): picklescan ZIP archive manipulation attack leads to crash - Severity: Medium 5.3 - Published: Mar 10, 2025 - Affected: fixed in 0.0.23. - Fixed in 0.0.23 (released Mar 9, 2025, 1 day before disclosure). - The latest release, 1.0.5, is not affected. ### [CVE-2025-1889](https://cve.now/CVE-2025-1889): picklescan - Security scanning bypass via non-standard file extensions - Severity: Medium 5.3 - Published: Mar 3, 2025 - Affected: from 0.0.1, through 0.0.21; fixed in 0.0.22; fixed in 0.0.21. - Fixed in 0.0.22 (released Mar 6, 2025, 3 days after disclosure). - The latest release, 1.0.5, is not affected. ### [CVE-2025-1716](https://cve.now/CVE-2025-1716): picklescan - Security scanning bypass via 'pip main' - Severity: Medium 5.3 - Published: Feb 26, 2025 - Affected: fixed in 0.0.22; fixed in 0.0.21. - Fixed in 0.0.22 (released Mar 6, 2025, 8 days after disclosure). - The latest release, 1.0.5, is not affected. --- Source: cve.now Built by [Sazabi](https://www.sazabi.com/?utm_source=cve-now&utm_medium=markdown), AI-native observability and security: automatic issue detection, plain-language log search and live dashboards. Page: https://cve.now/packages/pypi/picklescan Site guide for agents: https://cve.now/llms.txt Uses NVD data; not endorsed by NVD.