GHSA-g38g-8gr9-h9xp
Critical · 9.8CVSS
9.8
EPSS
—
Published
Mar 3, 2026
CISA due date
—
The record
PickleScan has multiple stdlib modules with direct RCE not in blocklist
Affected packages
| Ecosystem | Package | Introduced | Fixed |
|---|---|---|---|
| PyPI | picklescan | 0 | 1.0.4 |
Related vulnerabilities
- GHSA-vvpj-8cmc-gx39 PickleScan's pkgutil.resolve_name has a universal blocklist bypass Also affects picklescan
- GHSA-7wx9-6375-f5wh PickleScan's profile.run blocklist mismatch allows exec() bypass Also affects picklescan
- GHSA-97f8-7cmv-76j2 Picklescan (scan_pytorch) Bypass via dynamic eval MAGIC_NUMBER Also affects picklescan
- GHSA-m7j5-r2p5-c39r picklescan vulnerable to arbitrary file create using logging.FileHandler Also affects picklescan
- GHSA-9m3x-qqw2-h32h picklescan missing detection by simple obfuscation of a `builtins.eval` call Also affects picklescan
- GHSA-9726-w42j-3qjr picklescan has Arbitrary file read using `io.FileIO` Also affects picklescan
- GHSA-46h3-79wf-xr6c Picklescan is vulnerable to RCE via missing detection when calling built-in python… Also affects picklescan
- GHSA-955r-x9j8-7rhh Picklescan is vulnerable to RCE via missing detection when calling built-in python… Also affects picklescan