@stackflag.bsky.socialCVE-2025-71365 - picklescan
The Picklescan tool, used to check Python pickle files for safety, can be tricked into missing harmful content. If an attacker hides malicious code in a pickle…
Too many irrelevant or confusing CVEs? Use stackflag.com
@stackflag.bsky.socialCVE-2025-71376 - picklescan
The picklescan tool does not spot a specially crafted Python object that uses a built‑in autocomplete function to run code. If a user loads such a pickle file with…
Too many irrelevant or confusing CVEs? Use stackflag.com
@stackflag.bsky.socialCVE-2025-71341 - picklescan
The Picklescan tool does not notice a specially crafted pickle file that uses Python's built-in profile.runctx function to run code. If a system checks a pickle…
Too many irrelevant or confusing CVEs? Use stackflag.com
@stackflag.bsky.socialCVE-2025-71370 - picklescan
Versions of Picklescan before 0.0.28 cannot spot a special torch function hidden inside pickle files. This lets an attacker create a crafted pickle that runs…
Too many irrelevant or confusing CVEs? Use stackflag.com