VendorsMmaitre314picklescanany version

Vulnerabilities

Mmaitre314 picklescan any version

Ranked by severity, then by exploit likelihood. Click a CVE ID for its full record.

12CVEs

picklescan - Security scanning bypass via 'pip main'

Published 2025-02-26 · Modified

9.8EPSS 0.017

PickleScan Security Bypass via Bad CRC in ZIP Archive

Published 2025-09-17 · Analyzed

9.8EPSS 0.015

picklescan - Zip Flag Bit Exploit Crashes Picklescan But Not PyTorch

Published 2025-03-10 · Modified

9.8EPSS 0.006

picklescan - Security scanning bypass via non-standard file extensions

Published 2025-03-03 · Modified

9.8EPSS 0.004

PickleScan Security Bypass Using Misleading File Extension

Published 2025-09-17 · Analyzed

9.3EPSS 0.008

PickleScan Bypasses Unsafe Globals Check Using Submodule Imports

Published 2025-09-17 · Analyzed

9.3EPSS 0.008

picklescan - Arbitrary Code Execution via torch.utils._config_module.load_config Bypass

Published 2026-06-21 · Analyzed

8.1EPSS 0.006

picklescan - Remote Code Execution via Undetected cProfile.runctx in Pickle Files

Published 2026-06-21 · Analyzed

8.1EPSS 0.005

picklescan - Arbitrary Code Execution via Undetected idlelib.pyshell.ModifiedInterpreter.runcommand

Published 2026-06-21 · Analyzed

8.1EPSS 0.004

The unsafe globals in Picklescan before 0.0.25 do not include ssl. Consequently, ssl.get_server_certificate can exfiltrate data via DNS after deserialization.

Published 2025-04-24 · Analyzed

7.5EPSS 0.002

picklescan - Arbitrary File Creation via logging.FileHandler Deserialization

Published 2026-06-20 · Modified

6.9EPSS 0.004

picklescan ZIP archive manipulation attack leads to crash

Published 2025-03-10 · Modified

6.5EPSS 0.003