Vulnerabilities in PickleScan

51 results
Vexday analysis

PickleScan apresenta um perfil de risco baixo com apenas 1 vulnerabilidade catalogada, sem registros de exploração ativa ou severidade crítica. A fraqueza identificada (CWE-693) refere-se à proteção inadequada de ativos, sendo de recente divulgação (últimos 90 dias), o que exige atenção ao patch mas sem urgência elevada.

CVE-2025-71356HIGHpicklescan - Arbitrary Code Execution via torch.fx.experimental.symbolic_shapes.ShapeEnv.evaluate_guards_expressionEPSS 0.3%CVE-2025-71376HIGHpicklescan - Arbitrary Code Execution via Undetected idlelib.autocomplete.AutoComplete.fetch_completionsEPSS 0.3%CVE-2025-71343HIGHpicklescan - Arbitrary Code Execution via lib2to3.pgen2.pgen.ParserGenerator.make_label Detection BypassEPSS 0.3%CVE-2025-71362HIGHpicklescan - Arbitrary Code Execution via Unsafe Deserialization in numpy.f2py.crackfortranEPSS 0.3%CVE-2025-71365HIGHpicklescan - Arbitrary Code Execution via numpy.f2py.crackfortran.myeval Detection BypassEPSS 0.3%CVE-2025-71340HIGHpicklescan - Remote Code Execution via idlelib.pyshell.ModifiedInterpreter.runcodeEPSS 0.3%CVE-2025-71353HIGHpicklescan - Remote Code Execution via torch._dynamo.guards.GuardBuilder.getEPSS 0.3%CVE-2025-71360HIGHpicklescan - Remote Code Execution via Undetected idlelib.calltip.get_entityEPSS 0.3%CVE-2025-71357HIGHpicklescan - Arbitrary Code Execution via Undetected idlelib.pyshell.ModifiedInterpreter.runcommandEPSS 0.3%CVE-2025-71354HIGHpicklescan - Remote Code Execution via idlelib.debugobj.ObjectTreeItem.SetTextEPSS 0.3%CVE-2025-46417MEDIUMThe unsafe globals in Picklescan before 0.0.25 do not include ssl. Consequently, ssl.get_server_certificate can exfiltrate data via DNS afteEPSS 0.2%