Search for packages
| purl | pkg:pypi/picklescan@0.0.19 |
| Next non-vulnerable version | None. |
| Latest non-vulnerable version | None. |
| Risk score | 4.5 |
| Advisory | Summary | Fixed in package version |
|---|---|---|
|
GHSA-fj43-3qmq-673f
|
Picklescan failed to detect to some unsafe global function in Numpy library ### Summary An unsafe deserialization vulnerability in Python’s … |
Vulnerable |
|
GHSA-rrxm-2pvv-m66x
|
Picklescan is vulnerable to RCE via missing detection when calling numpy.f2py.crackfortran.getlincoef ### Summary Picklescan uses the `numpy.f2py.crackfortran.getlincoef` function (a NumPy … |
Vulnerable |
|
GHSA-46h3-79wf-xr6c
|
Picklescan is vulnerable to RCE via missing detection when calling built-in python _operator.attrgetter ### Summary Picklescan uses _operator.attrgetter, which is … |
Vulnerable |
|
GHSA-x843-g5mx-g377
|
Picklescan is vulnerable to RCE through missing detection when calling built-in python operator.methodcaller ### Summary Picklescan uses `operator.methodcaller`, which is … |
Vulnerable |
|
GHSA-955r-x9j8-7rhh
|
Picklescan is vulnerable to RCE via missing detection when calling built-in python _operator.methodcaller ### Summary Picklescan uses _operator.methodcaller, which is … |
Vulnerable |
|
GHSA-vqmv-47xg-9wpr
|
Picklescan missing detection when calling pty.spawn ### Summary Using pty.spawn, which is a built-in python library function to execute arbitrary … |
Vulnerable |
|
GHSA-cffc-mxrf-mhh4
|
Picklescan is vulnerable to RCE via missing detection when calling numpy.f2py.crackfortran.param_eval ### Summary Picklescan uses numpy.f2py.crackfortran.param_eval, which is a function … |
Vulnerable |
|
GHSA-r8g5-cgf2-4m4m
|
Picklescan missing detection when calling numpy.f2py.crackfortran.getlincoef ### Summary An unsafe deserialization vulnerability allows an attacker to execute arbitrary code on … |
Vulnerable |
|
GHSA-49gj-c84q-6qm9
|
Picklescan is missing detection when calling built-in python cProfile.run ### Summary Using cProfile.run function, which is a built-in python library … |
Vulnerable |
|
GHSA-5qwp-399c-mjwf
|
Picklescan has a missing detection when calling built-in python trace.Trace.run ### Summary Using trace.Trace.run, which is a built-in python library … |
Vulnerable |
|
GHSA-9xph-j2h6-g47v
|
Picklescan has a missing detection when calling built-in python library idlelib.calltip.get_entity ### Summary Using idlelib.calltip.get_entity function, which is a built-in … |
Vulnerable |
|
GHSA-86cj-95qr-2p4f
|
Picklescan missing detection when calling pytorch function torch._dynamo.guards.GuardBuilder.get ### Summary Using torch._dynamo.guards.GuardBuilder.get function, which is a pytorch library function to … |
Vulnerable |
|
GHSA-p9w7-82w4-7q8m
|
Picklescan is missing detection when calling built-in python lib2to3.pgen2.pgen.ParserGenerator.make_label ### Summary Using lib2to3.pgen2.pgen.ParserGenerator.make_label function, which is a built-in python library … |
Vulnerable |
|
GHSA-g344-hcph-8vgg
|
Picklescan has a missing detection when calling built-in python trace.Trace.runctx ### Summary Using trace.Trace.runctx, which is a built-in python library … |
Vulnerable |
|
GHSA-cj3c-v495-4xqh
|
Picklescan has a missing detection when calling built-in python code.InteractiveInterpreter ### Summary Using code.InteractiveInterpreter.runcode, which is a built-in python library … |
Vulnerable |
|
GHSA-m869-42cg-3xwr
|
Picklescan is missing detection when calling built-in python idlelib.run.Executive.runcode ### Summary Using idlelib.run.Executive.runcode function, which is a built-in python library … |
Vulnerable |
|
GHSA-fqq6-7vqf-w3fg
|
Picklescan is missing detection when calling built-in python doctest.debug_script ### Summary Using doctest.debug_script function, which is a built-in python library … |
Vulnerable |
|
GHSA-3gf5-cxq9-w223
|
Picklescan is missing detection when calling built-in python idlelib.pyshell.ModifiedInterpreter.runcode ### Summary Using idlelib.pyshell.ModifiedInterpreter.runcode function, which is a built-in python library … |
Vulnerable |
|
GHSA-f54q-57x4-jg88
|
Picklescan has a missing detection when calling built-in python lib2to3.pgen2.grammar.Grammar.loads ### Summary Using lib2to3.pgen2.grammar.Grammar.loads, which is a built-in python library … |
Vulnerable |
|
GHSA-4r9r-ch6f-vxmx
|
Picklescan missing detection when calling pytorch function torch.utils.bottleneck.__main__.run_cprofile ### Summary Using torch.utils.bottleneck.__main__.run_cprofile function, which is a pytorch library function to … |
Vulnerable |
|
GHSA-f745-w6jp-hpxx
|
Picklescan missing detection when calling pytorch function torch.utils.collect_env.run ### Summary Using torch.utils.collect_env.run function, which is a pytorch library function to … |
Vulnerable |
|
GHSA-4whj-rm5r-c2v8
|
Picklescan is missing detection when calling pytorch function torch.utils.bottleneck.__main__.run_autograd_prof ### Summary Using torch.utils.bottleneck.\_\_main\_\_.run_autograd_prof function, which is a pytorch library function … |
Vulnerable |
|
GHSA-x696-vm39-cp64
|
Picklescan has a missing detection when calling built-in python profile.Profile.run ### Summary Using profile.Profile.run, which is a built-in python library … |
Vulnerable |
|
GHSA-h3qp-7fh3-f8h4
|
Picklescan missing detection when calling pytorch function torch.utils.data.datapipes.utils.decoder.basichandlers ### Summary Using torch.utils.data.datapipes.utils.decoder.basichandlers function, which is a pytorch library function to … |
Vulnerable |
|
GHSA-q77w-mwjj-7mqx
|
Picklescan is missing detection when calling built-in python library asyncio.unix_events._UnixSubprocessTransport._start ### Summary Using asyncio.unix_events._UnixSubprocessTransport._start function, which is a built-in python … |
Vulnerable |
|
GHSA-f4x7-rfwp-v3xw
|
Picklescan missing detection when calling pytorch function torch.fx.experimental.symbolic_shapes.ShapeEnv.evaluate_guards_expression ### Summary Using torch.fx.experimental.symbolic_shapes.ShapeEnv.evaluate_guards_expression function, which is a pytorch library function to … |
Vulnerable |
|
GHSA-w6mr-mj53-x258
|
Duplicate Advisory: Zip Exploit Crashes Picklescan But Not PyTorch ## Duplicate Advisory This advisory has been withdrawn because it is … |
Vulnerable |
|
GHSA-vr75-hjh9-7fr6
|
Duplicate Advisory: Remote Code Execution via Malicious Pickle File Bypassing Static Analysis ## Duplicate Advisory This advisory has been withdrawn … | There are no reported fixed by versions. |
|
GHSA-hw34-rqc5-h2gm
|
Duplicate Advisory: Picklescan Allows Remote Code Execution via Malicious Pickle File Bypassing Static Analysis ## Duplicate Advisory This advisory has … | There are no reported fixed by versions. |
|
GHSA-2fh4-gpch-vqv4
|
Duplicate Advisory: Zip Flag Bit Exploit Crashes Picklescan But Not PyTorch ## Duplicate Advisory This advisory has been withdrawn because … |
Vulnerable |
|
GHSA-4vr7-g93g-cf6m
|
Duplicate Advisory: Picklescan: ZIP archive scan bypass is possible through non-exhaustive Cyclic Redundancy Check ### Duplicate Advisory This advisory has … |
Vulnerable |
|
GHSA-j424-mc44-f4hj
|
Duplicate Advisory: Picklescan Bypass is Possible via File Extension Mismatch ### Duplicate Advisory This advisory has been withdrawn because it … |
Vulnerable |
|
GHSA-hf6h-9wq7-hmjg
|
Duplicate Advisory: Picklescan is Vulnerable to Unsafe Globals Check Bypass through Subclass Imports ### Duplicate Advisory This advisory has been … |
Vulnerable |
|
PYSEC-2025-20
Aliases: CVE-2025-1944 GHSA-7q5r-7gvp-wc82 |
picklescan before 0.0.23 is vulnerable to a ZIP archive manipulation attack that causes it to crash when attempting to extract … |
Vulnerable |
|
PYSEC-2025-151
Aliases: CVE-2025-10155 GHSA-jgw4-cr84-mqxg |
An Improper Input Validation vulnerability in the scanning logic of mmaitre314 picklescan versions up to and including 0.0.30 allows a … |
Vulnerable |
|
PYSEC-2025-18
Aliases: CVE-2025-1716 CVE-2025-1889 GHSA-655q-fx9r-782v GHSA-769v-p64c-89pr PYSEC-2025-19 |
picklescan before 0.0.21 does not treat 'pip' as an unsafe global. An attacker could craft a malicious model that uses … |
Vulnerable |
|
PYSEC-2025-152
Aliases: CVE-2025-10156 GHSA-mjqp-26hc-grxg |
An Improper Handling of Exceptional Conditions vulnerability in the ZIP archive scanning component of mmaitre314 picklescan allows a remote attacker … |
Vulnerable |
|
PYSEC-2025-34
Aliases: CVE-2025-46417 GHSA-93mv-x874-956g |
The unsafe globals in Picklescan before 0.0.25 do not include ssl. Consequently, ssl.get_server_certificate can exfiltrate data via DNS after deserialization. |
Vulnerable |
|
PYSEC-2025-21
Aliases: CVE-2025-1945 GHSA-w8jq-xcqf-f792 |
picklescan before 0.0.23 fails to detect malicious pickle files inside PyTorch model archives when certain ZIP file flag bits are … |
Vulnerable |
|
PYSEC-2025-153
Aliases: CVE-2025-10157 GHSA-f7qq-56ww-84cr |
A Protection Mechanism Failure vulnerability in mmaitre314 picklescan versions up to and including 0.0.30 allows a remote attacker to bypass … |
Vulnerable |
|
GHSA-5v23-73v4-w2fp
|
Duplicate Advisory: picklescan has Arbitrary file read using `io.FileIO` ### Duplicate Advisory This advisory has been withdrawn because it is … |
Vulnerable |
|
GHSA-82fg-2r99-h7v6
|
Duplicate Advisory: PickleScan's pkgutil.resolve_name has a universal blocklist bypass ### Duplicate Advisory This advisory has been withdrawn because it is … |
Vulnerable |
|
GHSA-7f79-rvx6-vxc4
|
Duplicate Advisory: Picklescan does not block ctypes ### Duplicate Advisory This advisory has been withdrawn because it is a duplicate … |
Vulnerable |
|
GHSA-rmpp-8wf5-xx5q
|
Duplicate Advisory: Picklescan vulnerable to Arbitrary File Writing ### Duplicate Advisory This advisory has been withdrawn because it is a … |
Vulnerable |
|
PYSEC-2026-225
Aliases: CVE-2026-56304 GHSA-m7j5-r2p5-c39r |
picklescan before 1.0.1 contains an unsafe pickle deserialization vulnerability allowing unauthenticated attackers to create arbitrary zero-byte files via logging.FileHandler class … |
Vulnerable |
|
PYSEC-2026-245
Aliases: CVE-2025-71348 GHSA-vv6j-3g6g-2pvj |
picklescan before 0.0.28 fails to detect malicious pickle files that invoke torch.utils._config_module.load_config function within reduce methods. Attackers can craft pickle … |
Vulnerable |
|
PYSEC-2026-246
Aliases: CVE-2025-71357 GHSA-j343-8v2j-ff7w |
picklescan before 0.0.30 fails to detect malicious pickle files using idlelib.pyshell.ModifiedInterpreter.runcommand in reduce methods. Attackers can embed undetected code in … |
Vulnerable |
|
PYSEC-2026-247
Aliases: CVE-2025-71378 GHSA-9w88-8rmg-7g2p |
picklescan before 0.0.30 fails to detect cProfile.runctx function calls in pickle file reduce methods, allowing attackers to execute arbitrary code. … |
Vulnerable |
|
PYSEC-2026-455
Aliases: CVE-2026-53873 GHSA-7wx9-6375-f5wh |
PickleScan's profile.run blocklist mismatch allows exec() bypass ## Summary picklescan v1.0.3 blocks `profile.Profile.run` and `profile.Profile.runctx` but does NOT block the … |
Vulnerable |
|
PYSEC-2026-456
Aliases: CVE-2026-3490 GHSA-vvpj-8cmc-gx39 |
PickleScan's pkgutil.resolve_name has a universal blocklist bypass ## Summary `pkgutil.resolve_name()` is a Python stdlib function that resolves any `"module:attribute"` string … |
Vulnerable |
|
GHSA-4p4h-9gvq-7xfg
|
Duplicate Advisory: Picklescan Vulnerable to Exfiltration via DNS via linecache and ssl.get_server_certificate # Duplicate Advisory This advisory has been withdrawn … | There are no reported fixed by versions. |
|
PYSEC-2026-2873
Aliases: CVE-2026-53875 GHSA-97f8-7cmv-76j2 |
Picklescan (scan_pytorch) Bypass via dynamic eval MAGIC_NUMBER ### Summary This is a scanning bypass to `scan_pytorch` function in `picklescan`. As … |
Vulnerable |
|
PYSEC-2026-1782
Aliases: CVE-2025-71323 GHSA-4675-36f9-wf6r |
Picklescan does not block ctypes ### Summary Picklescan doesnt flag ctypes module as a dangerous module, which is a huge … |
Vulnerable |
|
PYSEC-2025-19
Aliases: CVE-2025-1716 CVE-2025-1889 GHSA-655q-fx9r-782v GHSA-769v-p64c-89pr PYSEC-2025-18 |
picklescan before 0.0.22 only considers standard pickle file extensions in the scope for its vulnerability scan. An attacker could craft … |
Vulnerable Vulnerable |
|
PYSEC-2026-1785
Aliases: CVE-2025-71320 GHSA-84r2-jw7c-4r5q |
Picklescan has Incomplete List of Disallowed Inputs ### Summary Currently picklescanner only blocks some specific functions of the pydoc and … |
Vulnerable |
|
PYSEC-2026-1786
Aliases: CVE-2025-71361 GHSA-8r4j-24qv-fmq9 |
Picklescan has a missing detection when calling built-in python idlelib.calltip.Calltip ### Summary Using idlelib.calltip.Calltip.fetch_tip, which is a built-in python library … |
Vulnerable |
|
PYSEC-2026-1783
Aliases: CVE-2025-71339 GHSA-6556-fwc2-fg2p |
Picklescan is vulnerable to RCE through missing detection when calling numpy.f2py.crackfortran._eval_length ### Summary Picklescan uses the `numpy.f2py.crackfortran._eval_length` function (a NumPy … |
Vulnerable |
|
PYSEC-2026-1789
Aliases: CVE-2026-53874 GHSA-9m3x-qqw2-h32h |
picklescan missing detection by simple obfuscation of a `builtins.eval` call ### Summary An unsafe deserialization vulnerability allows any unauthenticated user … |
Vulnerable |
|
PYSEC-2026-1784
Aliases: CVE-2025-71358 GHSA-6w4w-5w54-rjvr |
Picklescan has a missing detection when calling built-in python idlelib.autocomplete.AutoComplete.get_entity ### Summary Using idlelib.autocomplete.AutoComplete.get_entity, which is a built-in python library … |
Vulnerable |
|
PYSEC-2026-1790
Aliases: CVE-2025-71322 GHSA-hgrh-qx5j-jfwx |
Picklescan Bypasses Unsafe Globals Check using pty.spawn ### Summary The vulnerability allows malicious actors to bypass PickleScan's unsafe globals check, … |
Vulnerable |
|
PYSEC-2026-1791
Aliases: CVE-2025-71321 GHSA-m273-6v24-x4m4 |
Picklescan vulnerable to Arbitrary File Writing ### Summary Picklescan has got open() and shutil in its default dangerous blocklist to … |
Vulnerable |
|
PYSEC-2026-1781
Aliases: CVE-2025-71354 GHSA-3vg9-h568-4w9m |
Picklescan has a missing detection when calling built-in python idlelib.debugobj.ObjectTreeItem ### Summary Using idlelib.debugobj.ObjectTreeItem.SetText, which is a built-in python library … |
Vulnerable |
|
PYSEC-2026-1792
Aliases: CVE-2025-71344 GHSA-xp4f-hrf8-rxw7 |
Picklescan is missing detection when calling built-in python ensurepip._run_pip ### Summary Using ensurepip._run_pip function, which is a built-in python library … |
Vulnerable |
|
PYSEC-2026-1788
Aliases: CVE-2025-71325 GHSA-9gvj-pp9x-gcfr |
Picklescan has pickle parsing logic flaw that leads to malicious pickle file bypass ### Details There's a parsing logic error … |
Vulnerable |
|
PYSEC-2026-1787
Aliases: CVE-2026-53872 GHSA-9726-w42j-3qjr |
picklescan has Arbitrary file read using `io.FileIO` ### Summary Unsafe pickle deserialization allows unauthenticated attackers to read arbitrary server files … |
Vulnerable |
|
GHSA-fcqg-3mwf-cfcf
|
Duplicate Advisory: Picklescan is missing detection when calling built-in Python cProfile.runctx ### Duplicate Advisory This advisory has been withdrawn because … |
Vulnerable |
|
GHSA-fh2f-24rh-r2vq
|
Duplicate Advisory: Picklescan missing detection when calling built-in python library function timeit.timeit() ### Duplicate Advisory This advisory has been withdrawn … |
Vulnerable |
|
GHSA-8mc5-7w9m-fqv6
|
Duplicate Advisory: Picklescan is missing detection when calling built-in python idlelib.pyshell.ModifiedInterpreter.runcommand ### Duplicate Advisory This advisory has been withdrawn because … |
Vulnerable |
|
GHSA-qvp4-q2p5-22gg
|
Duplicate Advisory: Picklescan missing detection when calling pytorch function torch.utils._config_module.load_config ### Duplicate Advisory This advisory has been withdrawn because it … |
Vulnerable |
|
PYSEC-2026-4131
Aliases: CVE-2025-71365 GHSA-3329-ghmp-jmv5 |
Picklescan is vulnerable to RCE through missing detection when calling numpy.f2py.crackfortran.myeval ### Summary Picklescan uses numpy.f2py.crackfortran.myeval, which is a function … |
Vulnerable |
|
PYSEC-2026-4136
Aliases: CVE-2025-71370 GHSA-vr7h-p6mm-wpmh |
Picklescan missing detection when calling pytorch function torch.jit.unsupported_tensor_ops.execWrapper ### Summary Using torch.jit.unsupported_tensor_ops.execWrapper function, which is a pytorch library function to … |
Vulnerable |
|
PYSEC-2026-4134
Aliases: CVE-2026-56315 GHSA-g38g-8gr9-h9xp |
PickleScan has multiple stdlib modules with direct RCE not in blocklist ## Summary picklescan v1.0.3 (latest) does not block at … |
Vulnerable |
|
PYSEC-2026-4135
Aliases: CVE-2025-71351 GHSA-v7x6-rv5q-mhwc |
Picklescan missing detection when calling built-in python library function timeit.timeit() ### Summary Using timeit.timeit() function, which is a built-in python … |
Vulnerable |
|
PYSEC-2026-4132
Aliases: CVE-2025-71341 GHSA-6vqj-c2q5-j97w |
Picklescan has a missing detection when calling built-in python profile.Profile.runctx ### Summary Using profile.Profile.runctx, which is a built-in python library … |
Vulnerable |
|
PYSEC-2026-4133
Aliases: CVE-2025-71376 GHSA-7cq8-mj8x-j263 |
Picklescan has a missing detection when calling built-in python idlelib.autocomplete.AutoComplete.fetch_completions ### Summary Using idlelib.autocomplete.AutoComplete.fetch_completions, which is a built-in python library … |
Vulnerable |
|
GHSA-g7vj-qw6x-g3p8
|
Duplicate Advisory: PickleScan has multiple stdlib modules with direct RCE not in blocklist ### Duplicate Advisory This advisory has been … |
Vulnerable |
|
GHSA-gq8p-2329-gh3x
|
Duplicate Advisory: Picklescan has a missing detection when calling built-in python idlelib.autocomplete.AutoComplete.fetch_completions ### Duplicate Advisory This advisory has been withdrawn … |
Vulnerable |
|
GHSA-x36p-c636-788x
|
Duplicate Advisory: Picklescan is vulnerable to RCE through missing detection when calling numpy.f2py.crackfortran.myeval ### Duplicate Advisory This advisory has been … |
Vulnerable |
|
GHSA-q8qp-8jq6-78mc
|
Duplicate Advisory: Picklescan missing detection when calling pytorch function torch.jit.unsupported_tensor_ops.execWrapper ### Duplicate Advisory This advisory has been withdrawn because it … |
Vulnerable |
|
GHSA-mg57-j93w-g3c7
|
Duplicate Advisory: Picklescan has a missing detection when calling built-in python profile.Profile.runctx ### Duplicate Advisory This advisory has been withdrawn … |
Vulnerable |