Cloudanix VulnDB

GHSA-r48f-3986-4f9c

Medium · 5.8

fickling modules linecache, difflib and gc are missing from the unsafe modules blocklist

CVSS

5.8

EPSS

—

Published

Mar 13, 2026

CISA due date

—

The record

Two independent bugs in fickling's AST-based static analysis combine to allow a malicious pickle file to execute arbitrary stdlib function calls - including reading sensitive files - while check_safety() returns Severity.LIKELY_SAFE and fickling.load() completes without raising UnsafeFileError. A server using fickling.load() as a security gate before deserializing untrusted pickle data (its documented use case) is fully bypassed. The attacker receives the contents of any file readable by the server process as the return value of fickling.load().

Affected packages

Ecosystem Package Introduced Fixed

Related vulnerabilities