Vulnerabilities in picklescan

51 results
Vexday analysis

O picklescan apresenta 46 vulnerabilidades catalogadas, todas publicadas nos últimos 90 dias, indicando risco recente e em evolução. Oito dessas vulnerabilidades são críticas (CVSS alto), predominantemente relacionadas à desserialização insegura (CWE-502), que permite execução remota de código. Embora nenhuma esteja sob ataque ativo documentado no momento, o volume concentrado de divulgações recentes exige atenção imediata em ambientes que processam dados serializados de fontes não confiáveis.

CVE-2025-71356HIGHpicklescan - Arbitrary Code Execution via torch.fx.experimental.symbolic_shapes.ShapeEnv.evaluate_guards_expressionEPSS 0.3%CVE-2025-71376HIGHpicklescan - Arbitrary Code Execution via Undetected idlelib.autocomplete.AutoComplete.fetch_completionsEPSS 0.3%CVE-2025-71343HIGHpicklescan - Arbitrary Code Execution via lib2to3.pgen2.pgen.ParserGenerator.make_label Detection BypassEPSS 0.3%CVE-2025-71362HIGHpicklescan - Arbitrary Code Execution via Unsafe Deserialization in numpy.f2py.crackfortranEPSS 0.3%CVE-2025-71365HIGHpicklescan - Arbitrary Code Execution via numpy.f2py.crackfortran.myeval Detection BypassEPSS 0.3%CVE-2025-71340HIGHpicklescan - Remote Code Execution via idlelib.pyshell.ModifiedInterpreter.runcodeEPSS 0.3%CVE-2025-71353HIGHpicklescan - Remote Code Execution via torch._dynamo.guards.GuardBuilder.getEPSS 0.3%CVE-2025-71360HIGHpicklescan - Remote Code Execution via Undetected idlelib.calltip.get_entityEPSS 0.3%CVE-2025-71357HIGHpicklescan - Arbitrary Code Execution via Undetected idlelib.pyshell.ModifiedInterpreter.runcommandEPSS 0.3%CVE-2025-71354HIGHpicklescan - Remote Code Execution via idlelib.debugobj.ObjectTreeItem.SetTextEPSS 0.3%CVE-2025-46417MEDIUMThe unsafe globals in Picklescan before 0.0.25 do not include ssl. Consequently, ssl.get_server_certificate can exfiltrate data via DNS afteEPSS 0.2%