Picklescan vulnerabilities
51 CVEs and advisories name Picklescan as an affected vendor, newest first. Follow it as a feed.
- CVE-2025-71365picklescan - Arbitrary Code Execution via numpy.f2py.crackfortran.myeval Detection Bypass
- CVE-2025-71341picklescan - Remote Code Execution via Undetected profile.Profile.runctx
- CVE-2025-71358picklescan - Remote Code Execution via idlelib.autocomplete.AutoComplete.get_entity
- CVE-2025-71344picklescan - Arbitrary Code Execution via Undetected ensurepip._run_pip Function
- CVE-2025-71339Picklescan - Arbitrary Code Execution via numpy.f2py.crackfortran._eval_length Gadget
- CVE-2025-71378picklescan - Remote Code Execution via Undetected cProfile.runctx in Pickle Files
- CVE-2025-71357picklescan - Arbitrary Code Execution via Undetected idlelib.pyshell.ModifiedInterpreter.runcommand
- CVE-2025-71351picklescan - Remote Code Execution via timeit.timeit() Detection Bypass
- CVE-2025-71348picklescan - Arbitrary Code Execution via torch.utils._config_module.load_config Bypass
- CVE-2026-56304picklescan - Arbitrary File Creation via logging.FileHandler Deserialization
- CVE-2026-53875picklescan - Scanning Bypass via Dynamic Eval in scan_pytorch
- CVE-2026-53874picklescan - Arbitrary Code Execution via Obfuscated eval Call
- CVE-2026-53873picklescan - Arbitrary Code Execution via profile.run() Blocklist Bypass
- CVE-2026-53872picklescan - Arbitrary File Read via Unsafe Pickle Deserialization
- CVE-2026-3490picklescan - Universal Blocklist Bypass via pkgutil.resolve_name
- CVE-2025-71325picklescan - Detection Bypass via STACK_GLOBAL Opcode Parsing Logic Flaw
- CVE-2025-71323picklescan - Remote Code Execution via Unblocked ctypes Module
- CVE-2025-71322PickleScan - Unsafe Globals Check Bypass via pty.spawn Function
- CVE-2025-71321picklescan - Arbitrary File Writing via distutils Module Bypass
- CVE-2025-71320picklescan - Remote Code Execution via Incomplete Disallowed Inputs
- CVE-2025-46417The unsafe globals in Picklescan before 0.0.25 do not include ssl.