CVE-2026-22609
Critical · 9.8Fickling has Static Analysis Bypass via Incomplete Dangerous Module Blocklist
CVSS
9.8
EPSS
0.6%
Published
Jan 9, 2026
CISA due date
—
The record
The `unsafe_imports()` method in Fickling's static analyzer fails to flag several high-risk Python modules that can be used for arbitrary code execution. Malicious pickles importing these modules will not be detected as unsafe, allowing attackers to bypass Fickling's primary static safety checks.
Affected packages
| Ecosystem | Package | Introduced | Fixed |
|---|---|---|---|
| PyPI | fickling | 0 | 0.1.7 |
Related vulnerabilities
- GHSA-q5qq-mvfm-j35x Fickling has Static Analysis Bypass via Incomplete Dangerous Module Blocklist Same vulnerability
- GHSA-5hwf-rc88-82xm Fickling missing RCE-capable modules in UNSAFE_IMPORTS Also affects fickling
- GHSA-wccx-j62j-r448 Fickling has `always_check_safety()` bypass: pickle.loads and _pickle.loads remain… Also affects fickling
- GHSA-mhc9-48gj-9gp3 Fickling has safety check bypass via REDUCE+BUILD opcode sequence Also affects fickling
- GHSA-mxhj-88fx-4pcv Fickling: OBJ opcode call invisibility bypasses all safety checks Also affects fickling
- GHSA-83pf-v6qq-pwmr Fickling has a detection bypass via stdlib network-protocol constructors Also affects fickling
- GHSA-h4rm-mm56-xf63 Fickling vulnerable to detection bypass due to "builtins" blindness Also affects fickling
- GHSA-5hvc-6wx8-mvv4 Fickling vulnerable to use of ctypes and pydoc gadget chain to bypass detection Also affects fickling