GHSA-hgrh-qx5j-jfwx
High · 8.8CVSS
8.8
EPSS
—
Published
Dec 29, 2025
CISA due date
—
The record
Picklescan Bypasses Unsafe Globals Check using pty.spawn
Affected packages
| Ecosystem | Package | Introduced | Fixed |
|---|---|---|---|
| PyPI | picklescan | 0 | 0.0.33 |
Related vulnerabilities
- GHSA-g38g-8gr9-h9xp PickleScan has multiple stdlib modules with direct RCE not in blocklist Also affects picklescan
- GHSA-vvpj-8cmc-gx39 PickleScan's pkgutil.resolve_name has a universal blocklist bypass Also affects picklescan
- GHSA-7wx9-6375-f5wh PickleScan's profile.run blocklist mismatch allows exec() bypass Also affects picklescan
- GHSA-97f8-7cmv-76j2 Picklescan (scan_pytorch) Bypass via dynamic eval MAGIC_NUMBER Also affects picklescan
- GHSA-m7j5-r2p5-c39r picklescan vulnerable to arbitrary file create using logging.FileHandler Also affects picklescan
- GHSA-9m3x-qqw2-h32h picklescan missing detection by simple obfuscation of a `builtins.eval` call Also affects picklescan
- GHSA-9726-w42j-3qjr picklescan has Arbitrary file read using `io.FileIO` Also affects picklescan
- GHSA-46h3-79wf-xr6c Picklescan is vulnerable to RCE via missing detection when calling built-in python… Also affects picklescan