# cve.now: Picklescan The newest entries naming Picklescan as an affected vendor (up to 200), of 51 in all, 0 known exploited. Older ones are in the full catalog at https://cve.now/latest.md. - [CVE-2025-71375](https://cve.now/CVE-2025-71375.md): picklescan - Undetected Remote Code Execution via \_operator.methodcaller (CVSS 7.6) - [CVE-2025-71373](https://cve.now/CVE-2025-71373.md): picklescan - Remote Code Execution via operator.methodcaller Detection Bypass (CVSS 7.6) - [CVE-2025-71372](https://cve.now/CVE-2025-71372.md): Picklescan - Arbitrary Code Execution via numpy.f2py.crackfortran.getlincoef Gadget (CVSS 7.6) - [CVE-2025-71369](https://cve.now/CVE-2025-71369.md): picklescan - Unsafe Deserialization via torch.utils.data.datapipes.utils.decoder.basichandlers (CVSS 7.6) - [CVE-2025-71367](https://cve.now/CVE-2025-71367.md): picklescan - Remote Code Execution via \_operator.attrgetter Detection Bypass (CVSS 7.6) - [CVE-2025-71366](https://cve.now/CVE-2025-71366.md): picklescan - Arbitrary Code Execution via torch.utils.bottleneck.\_\_main\_\_.run\_cprofile (CVSS 7.6) - [CVE-2025-71364](https://cve.now/CVE-2025-71364.md): picklescan - Arbitrary Code Execution via Undetected asyncio.unix\_events.\_UnixSubprocessTransport.\_start (CVSS 7.6) - [CVE-2025-71362](https://cve.now/CVE-2025-71362.md): picklescan - Arbitrary Code Execution via Unsafe Deserialization in numpy.f2py.crackfortran (CVSS 7.6) - [CVE-2025-71360](https://cve.now/CVE-2025-71360.md): picklescan - Remote Code Execution via Undetected idlelib.calltip.get\_entity (CVSS 7.6) - [CVE-2025-71359](https://cve.now/CVE-2025-71359.md): picklescan - Unsafe Deserialization via lib2to3.pgen2.grammar.Grammar.loads (CVSS 7.6) - [CVE-2025-71356](https://cve.now/CVE-2025-71356.md): picklescan - Arbitrary Code Execution via torch.fx.experimental.symbolic\_shapes.ShapeEnv.evaluate\_guards\_expression (CVSS 7.6) - [CVE-2025-71353](https://cve.now/CVE-2025-71353.md): picklescan - Remote Code Execution via torch.\_dynamo.guards.GuardBuilder.get (CVSS 7.6) - [CVE-2025-71347](https://cve.now/CVE-2025-71347.md): picklescan - Undetected Remote Code Execution via numpy.f2py.crackfortran.param\_eval (CVSS 7.6) - [CVE-2025-71345](https://cve.now/CVE-2025-71345.md): picklescan - Arbitrary Code Execution via torch.utils.bottleneck.\_\_main\_\_.run\_autograd\_prof (CVSS 7.6) - [CVE-2025-71343](https://cve.now/CVE-2025-71343.md): picklescan - Arbitrary Code Execution via lib2to3.pgen2.pgen.ParserGenerator.make\_label Detection Bypass (CVSS 7.6) - [CVE-2025-71342](https://cve.now/CVE-2025-71342.md): picklescan - Undetected Remote Code Execution via idlelib.run.Executive.runcode (CVSS 7.6) - [CVE-2025-71374](https://cve.now/CVE-2025-71374.md): picklescan - Arbitrary Code Execution via Undetected profile.Profile.run (CVSS 7.6) - [CVE-2025-71371](https://cve.now/CVE-2025-71371.md): picklescan - Remote Code Execution via code.InteractiveInterpreter Detection Bypass (CVSS 7.6) - [CVE-2025-71368](https://cve.now/CVE-2025-71368.md): picklescan - Arbitrary Code Execution via Undetected doctest.debug\_script (CVSS 7.6) - [CVE-2025-71363](https://cve.now/CVE-2025-71363.md): picklescan - Arbitrary Code Execution via Undetected cProfile.run in Pickle Deserialization (CVSS 7.6) - [CVE-2025-71355](https://cve.now/CVE-2025-71355.md): Picklescan - Arbitrary Code Execution via Unsafe Numpy Function Detection Bypass (CVSS 7.6) - [CVE-2025-71352](https://cve.now/CVE-2025-71352.md): picklescan - Remote Code Execution via Undetected trace.Trace.runctx in Pickle Files (CVSS 7.6) - [CVE-2025-71350](https://cve.now/CVE-2025-71350.md): picklescan - Undetected Remote Code Execution via torch.utils.collect\_env.run (CVSS 7.6) - [CVE-2025-71349](https://cve.now/CVE-2025-71349.md): picklescan - Arbitrary Code Execution via Undetected trace.Trace.run in Pickle Files (CVSS 7.6) - [CVE-2025-71340](https://cve.now/CVE-2025-71340.md): picklescan - Remote Code Execution via idlelib.pyshell.ModifiedInterpreter.runcode (CVSS 7.6) - [CVE-2025-71361](https://cve.now/CVE-2025-71361.md): picklescan - Remote Code Execution via Undetected idlelib.calltip.Calltip.fetch\_tip (CVSS 7.6) - [CVE-2025-71354](https://cve.now/CVE-2025-71354.md): picklescan - Remote Code Execution via idlelib.debugobj.ObjectTreeItem.SetText (CVSS 7.6) - [CVE-2026-56315](https://cve.now/CVE-2026-56315.md): picklescan - Remote Code Execution via Unblocked Standard Library Modules (CVSS 9.3) - [CVE-2025-71376](https://cve.now/CVE-2025-71376.md): picklescan - Arbitrary Code Execution via Undetected idlelib.autocomplete.AutoComplete.fetch\_completions (CVSS 7.6) - [CVE-2025-71370](https://cve.now/CVE-2025-71370.md): picklescan - Remote Code Execution via torch.jit.unsupported\_tensor\_ops.execWrapper (CVSS 7.6) - [CVE-2025-71365](https://cve.now/CVE-2025-71365.md): picklescan - Arbitrary Code Execution via numpy.f2py.crackfortran.myeval Detection Bypass (CVSS 7.6) - [CVE-2025-71341](https://cve.now/CVE-2025-71341.md): picklescan - Remote Code Execution via Undetected profile.Profile.runctx (CVSS 7.6) - [CVE-2025-71358](https://cve.now/CVE-2025-71358.md): picklescan - Remote Code Execution via idlelib.autocomplete.AutoComplete.get\_entity (CVSS 7.6) - [CVE-2025-71344](https://cve.now/CVE-2025-71344.md): picklescan - Arbitrary Code Execution via Undetected ensurepip.\_run\_pip Function (CVSS 7.6) - [CVE-2025-71339](https://cve.now/CVE-2025-71339.md): Picklescan - Arbitrary Code Execution via numpy.f2py.crackfortran.\_eval\_length Gadget (CVSS 7.6) - [CVE-2025-71378](https://cve.now/CVE-2025-71378.md): picklescan - Remote Code Execution via Undetected cProfile.runctx in Pickle Files (CVSS 7.6) - [CVE-2025-71357](https://cve.now/CVE-2025-71357.md): picklescan - Arbitrary Code Execution via Undetected idlelib.pyshell.ModifiedInterpreter.runcommand (CVSS 7.6) - [CVE-2025-71351](https://cve.now/CVE-2025-71351.md): picklescan - Remote Code Execution via timeit.timeit() Detection Bypass (CVSS 7.6) - [CVE-2025-71348](https://cve.now/CVE-2025-71348.md): picklescan - Arbitrary Code Execution via torch.utils.\_config\_module.load\_config Bypass (CVSS 7.6) - [CVE-2026-56304](https://cve.now/CVE-2026-56304.md): picklescan - Arbitrary File Creation via logging.FileHandler Deserialization (CVSS 6.9) - [CVE-2026-53875](https://cve.now/CVE-2026-53875.md): picklescan - Scanning Bypass via Dynamic Eval in scan\_pytorch (CVSS 7.1) - [CVE-2026-53874](https://cve.now/CVE-2026-53874.md): picklescan - Arbitrary Code Execution via Obfuscated eval Call (CVSS 9.3) - [CVE-2026-53873](https://cve.now/CVE-2026-53873.md): picklescan - Arbitrary Code Execution via profile.run() Blocklist Bypass (CVSS 9.3) - [CVE-2026-53872](https://cve.now/CVE-2026-53872.md): picklescan - Arbitrary File Read via Unsafe Pickle Deserialization (CVSS 8.7) - [CVE-2026-3490](https://cve.now/CVE-2026-3490.md): picklescan - Universal Blocklist Bypass via pkgutil.resolve\_name (CVSS 10.0) - [CVE-2025-71325](https://cve.now/CVE-2025-71325.md): picklescan - Detection Bypass via STACK\_GLOBAL Opcode Parsing Logic Flaw (CVSS 9.3) - [CVE-2025-71323](https://cve.now/CVE-2025-71323.md): picklescan - Remote Code Execution via Unblocked ctypes Module (CVSS 9.3) - [CVE-2025-71322](https://cve.now/CVE-2025-71322.md): PickleScan - Unsafe Globals Check Bypass via pty.spawn Function (CVSS 8.7) - [CVE-2025-71321](https://cve.now/CVE-2025-71321.md): picklescan - Arbitrary File Writing via distutils Module Bypass (CVSS 9.3) - [CVE-2025-71320](https://cve.now/CVE-2025-71320.md): picklescan - Remote Code Execution via Incomplete Disallowed Inputs (CVSS 9.3) - [CVE-2025-46417](https://cve.now/CVE-2025-46417.md): The unsafe globals in Picklescan before 0.0.25 do not include ssl. (CVSS 6.8) --- Source: cve.now Built by [Sazabi](https://www.sazabi.com/?utm_source=cve-now&utm_medium=markdown), AI-native observability and security: automatic issue detection, plain-language log search and live dashboards. Page: https://cve.now/vendors/picklescan Site guide for agents: https://cve.now/llms.txt Uses NVD data; not endorsed by NVD.