Vulnerabilities in PickleScan
27 resultsCVE-2025-71376HIGHpicklescan - Arbitrary Code Execution via Undetected idlelib.autocomplete.AutoComplete.fetch_completionsEPSS 0.3%CVE-2025-71365HIGHpicklescan - Arbitrary Code Execution via numpy.f2py.crackfortran.myeval Detection BypassEPSS 0.3%CVE-2026-56304MEDIUMpicklescan - Arbitrary File Creation via logging.FileHandler DeserializationEPSS 0.3%CVE-2025-71354HIGHpicklescan - Remote Code Execution via idlelib.debugobj.ObjectTreeItem.SetTextEPSS 0.3%CVE-2025-71358HIGHpicklescan - Remote Code Execution via idlelib.autocomplete.AutoComplete.get_entityEPSS 0.2%CVE-2025-71357HIGHpicklescan - Arbitrary Code Execution via Undetected idlelib.pyshell.ModifiedInterpreter.runcommandEPSS 0.2%CVE-2025-46417MEDIUMThe unsafe globals in Picklescan before 0.0.25 do not include ssl. Consequently, ssl.get_server_certificate can exfiltrate data via DNS afteEPSS 0.2%