picklescan (PyPI)
Advisories
119
Latest version
—
License
—
OpenSSF Scorecard
—
How to fix
Upgrading to 1.0.4 or later clears every advisory below that has a fix.
Upgrade commands
pip
pip install --upgrade "picklescan>=1.0.4"poetry
poetry add "picklescan>=1.0.4"uv
uv add "picklescan>=1.0.4"Known vulnerabilities
| Advisory | Severity | Affected | Fixed in |
|---|---|---|---|
| GHSA-g7vj-qw6x-g3p8 Duplicate Advisory: PickleScan has multiple stdlib modules with direct RCE not in blocklist Withdrawn |
Critical | < 1.0.4 | 1.0.4 |
| GHSA-x36p-c636-788x Duplicate Advisory: Picklescan is vulnerable to RCE through missing detection when calling numpy.f2py.crackfortran.myeval Withdrawn |
High | < 0.0.33 | 0.0.33 |
| GHSA-q8qp-8jq6-78mc Duplicate Advisory: Picklescan missing detection when calling pytorch function torch.jit.unsupported_tensor_ops.execWrapper Withdrawn |
High | < 0.0.28 | 0.0.28 |
| GHSA-mg57-j93w-g3c7 Duplicate Advisory: Picklescan has a missing detection when calling built-in python profile.Profile.runctx Withdrawn |
High | < 0.0.29 | 0.0.29 |
| GHSA-gq8p-2329-gh3x Duplicate Advisory: Picklescan has a missing detection when calling built-in python idlelib.autocomplete.AutoComplete.fetch_completions Withdrawn |
High | < 0.0.29 | 0.0.29 |
| GHSA-fh2f-24rh-r2vq Duplicate Advisory: Picklescan missing detection when calling built-in python library function timeit.timeit() Withdrawn |
High | < 0.0.25 | 0.0.25 |
| GHSA-8mc5-7w9m-fqv6 Duplicate Advisory: Picklescan is missing detection when calling built-in python idlelib.pyshell.ModifiedInterpreter.runcommand Withdrawn |
High | < 0.0.30 | 0.0.30 |
| GHSA-fcqg-3mwf-cfcf Duplicate Advisory: Picklescan is missing detection when calling built-in Python cProfile.runctx Withdrawn |
High | < 0.0.30 | 0.0.30 |
| GHSA-qvp4-q2p5-22gg Duplicate Advisory: Picklescan missing detection when calling pytorch function torch.utils._config_module.load_config Withdrawn |
High | < 0.0.28 | 0.0.28 |
| GHSA-j6c9-qvp8-699f Duplicate Advisory: picklescan missing detection by simple obfuscation of a `builtins.eval` call Withdrawn |
Critical | all versions | No fix yet |
| GHSA-5v23-73v4-w2fp Duplicate Advisory: picklescan has Arbitrary file read using `io.FileIO` Withdrawn |
High | < 0.0.35 | 0.0.35 |
| GHSA-4mpj-78p6-rj59 Duplicate Advisory: PickleScan's profile.run blocklist mismatch allows exec() bypass Withdrawn |
Critical | all versions | No fix yet |
| GHSA-cc5p-54x3-hcf8 Duplicate Advisory: Picklescan (scan_pytorch) Bypass via dynamic eval MAGIC_NUMBER Withdrawn |
High | all versions | No fix yet |
| GHSA-82fg-2r99-h7v6 Duplicate Advisory: PickleScan's pkgutil.resolve_name has a universal blocklist bypass Withdrawn |
Critical | < 1.0.4 | 1.0.4 |
| GHSA-7f79-rvx6-vxc4 Duplicate Advisory: Picklescan does not block ctypes Withdrawn |
Critical | < 0.0.33 | 0.0.33 |
| GHSA-rmpp-8wf5-xx5q Duplicate Advisory: Picklescan vulnerable to Arbitrary File Writing Withdrawn |
Critical | < 0.0.33 | 0.0.33 |
| GHSA-5gp7-4733-2w2v Duplicate Advisory: Picklescan Bypasses Unsafe Globals Check using pty.spawn Withdrawn |
High | all versions | No fix yet |
| GHSA-5rph-q42j-36j9 Duplicate Advisory: Picklescan has pickle parsing logic flaw that leads to malicious pickle file bypass Withdrawn |
Critical | all versions | No fix yet |
| GHSA-6v84-v468-3c7f Duplicate Advisory: Picklescan has Incomplete List of Disallowed Inputs Withdrawn |
Critical | all versions | No fix yet |
| GHSA-g38g-8gr9-h9xp PickleScan has multiple stdlib modules with direct RCE not in blocklist |
Critical EPSS 1.15% |
< 1.0.4 | 1.0.4 |
| GHSA-g38g-8gr9-h9xp PickleScan has multiple stdlib modules with direct RCE not in blocklist |
Critical EPSS 1.15% |
< 1.0.4 | 1.0.4 |
| GHSA-vvpj-8cmc-gx39 PickleScan's pkgutil.resolve_name has a universal blocklist bypass |
Critical EPSS 0.82% |
< 1.0.4 | 1.0.4 |
| GHSA-vvpj-8cmc-gx39 PickleScan's pkgutil.resolve_name has a universal blocklist bypass |
Critical EPSS 0.82% |
< 1.0.4 | 1.0.4 |
| GHSA-7wx9-6375-f5wh PickleScan's profile.run blocklist mismatch allows exec() bypass |
Critical EPSS 0.46% |
< 1.0.4 | 1.0.4 |
| GHSA-7wx9-6375-f5wh PickleScan's profile.run blocklist mismatch allows exec() bypass |
Critical EPSS 0.46% |
< 1.0.4 | 1.0.4 |
| GHSA-97f8-7cmv-76j2 Picklescan (scan_pytorch) Bypass via dynamic eval MAGIC_NUMBER |
High EPSS 0.55% |
< 1.0.3 | 1.0.3 |
| GHSA-97f8-7cmv-76j2 Picklescan (scan_pytorch) Bypass via dynamic eval MAGIC_NUMBER |
High EPSS 0.55% |
< 1.0.3 | 1.0.3 |
| GHSA-m7j5-r2p5-c39r picklescan vulnerable to arbitrary file create using logging.FileHandler |
Medium EPSS 0.44% |
< 1.0.1 | 1.0.1 |
| GHSA-m7j5-r2p5-c39r picklescan vulnerable to arbitrary file create using logging.FileHandler |
Medium EPSS 0.44% |
< 1.0.1 | 1.0.1 |
| GHSA-9m3x-qqw2-h32h picklescan missing detection by simple obfuscation of a `builtins.eval` call |
Critical EPSS 0.52% |
< 1.0.1 | 1.0.1 |
| GHSA-9m3x-qqw2-h32h picklescan missing detection by simple obfuscation of a `builtins.eval` call |
Critical EPSS 0.52% |
< 1.0.1 | 1.0.1 |
| GHSA-9726-w42j-3qjr picklescan has Arbitrary file read using `io.FileIO` |
High EPSS 0.51% |
< 0.0.35 | 0.0.35 |
| GHSA-9726-w42j-3qjr picklescan has Arbitrary file read using `io.FileIO` |
High EPSS 0.51% |
< 0.0.35 | 0.0.35 |
| GHSA-46h3-79wf-xr6c Picklescan is vulnerable to RCE via missing detection when calling built-in python _operator.attrgetter |
High EPSS 0.56% |
< 0.0.34 | 0.0.34 |
| GHSA-955r-x9j8-7rhh Picklescan is vulnerable to RCE via missing detection when calling built-in python _operator.methodcaller |
High EPSS 0.46% |
< 0.0.34 | 0.0.34 |
| GHSA-6556-fwc2-fg2p Picklescan is vulnerable to RCE through missing detection when calling numpy.f2py.crackfortran._eval_length |
High EPSS 0.38% |
< 0.0.33 | 0.0.33 |
| GHSA-6556-fwc2-fg2p Picklescan is vulnerable to RCE through missing detection when calling numpy.f2py.crackfortran._eval_length |
High EPSS 0.38% |
< 0.0.33 | 0.0.33 |
| GHSA-rrxm-2pvv-m66x Picklescan is vulnerable to RCE via missing detection when calling numpy.f2py.crackfortran.getlincoef |
High EPSS 0.48% |
< 0.0.33 | 0.0.33 |
| GHSA-cffc-mxrf-mhh4 Picklescan is vulnerable to RCE via missing detection when calling numpy.f2py.crackfortran.param_eval |
High EPSS 0.56% |
< 0.0.33 | 0.0.33 |
| GHSA-3329-ghmp-jmv5 Picklescan is vulnerable to RCE through missing detection when calling numpy.f2py.crackfortran.myeval |
High EPSS 0.38% |
< 0.0.33 | 0.0.33 |
| GHSA-3329-ghmp-jmv5 Picklescan is vulnerable to RCE through missing detection when calling numpy.f2py.crackfortran.myeval |
High EPSS 0.38% |
< 0.0.33 | 0.0.33 |
| GHSA-x843-g5mx-g377 Picklescan is vulnerable to RCE through missing detection when calling built-in python operator.methodcaller |
High EPSS 0.56% |
< 0.0.33 | 0.0.33 |
| GHSA-r8g5-cgf2-4m4m Picklescan missing detection when calling numpy.f2py.crackfortran.getlincoef |
High EPSS 0.43% |
< 0.0.33 | 0.0.33 |
| GHSA-hgrh-qx5j-jfwx Picklescan Bypasses Unsafe Globals Check using pty.spawn |
High EPSS 0.38% |
< 0.0.33 | 0.0.33 |
| GHSA-hgrh-qx5j-jfwx Picklescan Bypasses Unsafe Globals Check using pty.spawn |
High EPSS 0.38% |
< 0.0.33 | 0.0.33 |
| GHSA-vqmv-47xg-9wpr Picklescan missing detection when calling pty.spawn |
High | < 0.0.33 | 0.0.33 |
| GHSA-84r2-jw7c-4r5q Picklescan has Incomplete List of Disallowed Inputs |
Critical EPSS 0.82% |
< 0.0.33 | 0.0.33 |
| GHSA-84r2-jw7c-4r5q Picklescan has Incomplete List of Disallowed Inputs |
Critical EPSS 0.82% |
< 0.0.33 | 0.0.33 |
| GHSA-4675-36f9-wf6r Picklescan does not block ctypes |
Critical EPSS 0.99% |
< 0.0.33 | 0.0.33 |
| GHSA-4675-36f9-wf6r Picklescan does not block ctypes |
Critical EPSS 0.99% |
< 0.0.33 | 0.0.33 |
| GHSA-m273-6v24-x4m4 Picklescan vulnerable to Arbitrary File Writing |
Critical EPSS 0.82% |
< 0.0.33 | 0.0.33 |
| GHSA-m273-6v24-x4m4 Picklescan vulnerable to Arbitrary File Writing |
Critical EPSS 0.82% |
< 0.0.33 | 0.0.33 |
| GHSA-hf6h-9wq7-hmjg Duplicate Advisory: Picklescan is Vulnerable to Unsafe Globals Check Bypass through Subclass Imports Withdrawn |
Critical | < 0.0.31 | 0.0.31 |
| GHSA-4vr7-g93g-cf6m Duplicate Advisory: Picklescan: ZIP archive scan bypass is possible through non-exhaustive Cyclic Redundancy Check Withdrawn |
Critical | < 0.0.31 | 0.0.31 |
| GHSA-j424-mc44-f4hj Duplicate Advisory: Picklescan Bypass is Possible via File Extension Mismatch Withdrawn |
Critical | < 0.0.31 | 0.0.31 |
| GHSA-jgw4-cr84-mqxg Picklescan Bypass is Possible via File Extension Mismatch |
High EPSS 0.85% |
< 0.0.31 | 0.0.31 |
| GHSA-jgw4-cr84-mqxg Picklescan Bypass is Possible via File Extension Mismatch |
High EPSS 0.85% |
< 0.0.31 | 0.0.31 |
| GHSA-mjqp-26hc-grxg Picklescan: ZIP archive scan bypass is possible through non-exhaustive Cyclic Redundancy Check |
Critical EPSS 1.48% |
< 0.0.31 | 0.0.31 |
| GHSA-mjqp-26hc-grxg Picklescan: ZIP archive scan bypass is possible through non-exhaustive Cyclic Redundancy Check |
Critical EPSS 1.48% |
< 0.0.31 | 0.0.31 |
| GHSA-f7qq-56ww-84cr Picklescan is Vulnerable to Unsafe Globals Check Bypass through Subclass Imports |
High EPSS 0.79% |
< 0.0.31 | 0.0.31 |
| GHSA-f7qq-56ww-84cr Picklescan is Vulnerable to Unsafe Globals Check Bypass through Subclass Imports |
High EPSS 0.79% |
< 0.0.31 | 0.0.31 |
| GHSA-q77w-mwjj-7mqx Picklescan is missing detection when calling built-in python library asyncio.unix_events._UnixSubprocessTransport._start |
High EPSS 0.70% |
< 0.0.30 | 0.0.30 |
| GHSA-49gj-c84q-6qm9 Picklescan is missing detection when calling built-in python cProfile.run |
High EPSS 0.67% |
< 0.0.30 | 0.0.30 |
| GHSA-9w88-8rmg-7g2p Picklescan is missing detection when calling built-in Python cProfile.runctx |
High EPSS 0.48% |
< 0.0.30 | 0.0.30 |
| GHSA-9w88-8rmg-7g2p Picklescan is missing detection when calling built-in Python cProfile.runctx |
High EPSS 0.48% |
< 0.0.30 | 0.0.30 |
| GHSA-fqq6-7vqf-w3fg Picklescan is missing detection when calling built-in python doctest.debug_script |
High EPSS 0.84% |
< 0.0.30 | 0.0.30 |
| GHSA-3gf5-cxq9-w223 Picklescan is missing detection when calling built-in python idlelib.pyshell.ModifiedInterpreter.runcode |
High EPSS 0.38% |
< 0.0.30 | 0.0.30 |
| GHSA-j343-8v2j-ff7w Picklescan is missing detection when calling built-in python idlelib.pyshell.ModifiedInterpreter.runcommand |
High EPSS 0.39% |
< 0.0.30 | 0.0.30 |
| GHSA-j343-8v2j-ff7w Picklescan is missing detection when calling built-in python idlelib.pyshell.ModifiedInterpreter.runcommand |
High EPSS 0.39% |
< 0.0.30 | 0.0.30 |
| GHSA-m869-42cg-3xwr Picklescan is missing detection when calling built-in python idlelib.run.Executive.runcode |
High EPSS 0.54% |
< 0.0.30 | 0.0.30 |
| GHSA-p9w7-82w4-7q8m Picklescan is missing detection when calling built-in python lib2to3.pgen2.pgen.ParserGenerator.make_label |
High EPSS 0.38% |
< 0.0.30 | 0.0.30 |
| GHSA-xp4f-hrf8-rxw7 Picklescan is missing detection when calling built-in python ensurepip._run_pip |
High EPSS 0.47% |
< 0.0.30 | 0.0.30 |
| GHSA-xp4f-hrf8-rxw7 Picklescan is missing detection when calling built-in python ensurepip._run_pip |
High EPSS 0.47% |
< 0.0.30 | 0.0.30 |
| GHSA-4whj-rm5r-c2v8 Picklescan is missing detection when calling pytorch function torch.utils.bottleneck.__main__.run_autograd_prof |
High EPSS 0.54% |
< 0.0.30 | 0.0.30 |
| GHSA-9xph-j2h6-g47v Picklescan has a missing detection when calling built-in python library idlelib.calltip.get_entity |
High EPSS 0.38% |
< 0.0.29 | 0.0.29 |
| GHSA-8r4j-24qv-fmq9 Picklescan has a missing detection when calling built-in python idlelib.calltip.Calltip |
High EPSS 0.43% |
< 0.0.29 | 0.0.29 |
| GHSA-8r4j-24qv-fmq9 Picklescan has a missing detection when calling built-in python idlelib.calltip.Calltip |
High EPSS 0.43% |
< 0.0.29 | 0.0.29 |
| GHSA-cj3c-v495-4xqh Picklescan has a missing detection when calling built-in python code.InteractiveInterpreter |
High EPSS 0.57% |
< 0.0.29 | 0.0.29 |
| GHSA-7cq8-mj8x-j263 Picklescan has a missing detection when calling built-in python idlelib.autocomplete.AutoComplete.fetch_completions |
High EPSS 0.38% |
< 0.0.29 | 0.0.29 |
| GHSA-7cq8-mj8x-j263 Picklescan has a missing detection when calling built-in python idlelib.autocomplete.AutoComplete.fetch_completions |
High EPSS 0.38% |
< 0.0.29 | 0.0.29 |
| GHSA-6w4w-5w54-rjvr Picklescan has a missing detection when calling built-in python idlelib.autocomplete.AutoComplete.get_entity |
High EPSS 0.31% |
< 0.0.29 | 0.0.29 |
| GHSA-6w4w-5w54-rjvr Picklescan has a missing detection when calling built-in python idlelib.autocomplete.AutoComplete.get_entity |
High EPSS 0.31% |
< 0.0.29 | 0.0.29 |
| GHSA-3vg9-h568-4w9m Picklescan has a missing detection when calling built-in python idlelib.debugobj.ObjectTreeItem |
High EPSS 0.45% |
< 0.0.29 | 0.0.29 |
| GHSA-3vg9-h568-4w9m Picklescan has a missing detection when calling built-in python idlelib.debugobj.ObjectTreeItem |
High EPSS 0.45% |
< 0.0.29 | 0.0.29 |
| GHSA-f54q-57x4-jg88 Picklescan has a missing detection when calling built-in python lib2to3.pgen2.grammar.Grammar.loads |
High EPSS 0.61% |
< 0.0.29 | 0.0.29 |
| GHSA-6vqj-c2q5-j97w Picklescan has a missing detection when calling built-in python profile.Profile.runctx |
High EPSS 0.58% |
< 0.0.29 | 0.0.29 |
| GHSA-6vqj-c2q5-j97w Picklescan has a missing detection when calling built-in python profile.Profile.runctx |
High EPSS 0.58% |
< 0.0.29 | 0.0.29 |
| GHSA-x696-vm39-cp64 Picklescan has a missing detection when calling built-in python profile.Profile.run |
High EPSS 0.72% |
< 0.0.29 | 0.0.29 |
| GHSA-g344-hcph-8vgg Picklescan has a missing detection when calling built-in python trace.Trace.runctx |
High EPSS 0.72% |
< 0.0.29 | 0.0.29 |
| GHSA-5qwp-399c-mjwf Picklescan has a missing detection when calling built-in python trace.Trace.run |
High EPSS 0.61% |
< 0.0.29 | 0.0.29 |
| GHSA-vv6j-3g6g-2pvj Picklescan is missing detection when calling pytorch function torch.utils._config_module.load_config |
High EPSS 0.55% |
< 0.0.28 | 0.0.28 |
| GHSA-vv6j-3g6g-2pvj Picklescan is missing detection when calling pytorch function torch.utils._config_module.load_config |
High EPSS 0.55% |
< 0.0.28 | 0.0.28 |
| GHSA-vr7h-p6mm-wpmh Picklescan missing detection when calling pytorch function torch.jit.unsupported_tensor_ops.execWrapper |
High EPSS 0.48% |
< 0.0.28 | 0.0.28 |
| GHSA-vr7h-p6mm-wpmh Picklescan missing detection when calling pytorch function torch.jit.unsupported_tensor_ops.execWrapper |
High EPSS 0.48% |
< 0.0.28 | 0.0.28 |
| GHSA-h3qp-7fh3-f8h4 Picklescan missing detection when calling pytorch function torch.utils.data.datapipes.utils.decoder.basichandlers |
High EPSS 0.56% |
< 0.0.28 | 0.0.28 |
| GHSA-f745-w6jp-hpxx Picklescan missing detection when calling pytorch function torch.utils.collect_env.run |
High EPSS 0.45% |
< 0.0.28 | 0.0.28 |
| GHSA-f4x7-rfwp-v3xw Picklescan missing detection when calling pytorch function torch.fx.experimental.symbolic_shapes.ShapeEnv.evaluate_guards_expression |
High EPSS 0.38% |
< 0.0.28 | 0.0.28 |
| GHSA-86cj-95qr-2p4f Picklescan missing detection when calling pytorch function torch._dynamo.guards.GuardBuilder.get |
High EPSS 0.38% |
< 0.0.28 | 0.0.28 |
| GHSA-4r9r-ch6f-vxmx Picklescan missing detection when calling pytorch function torch.utils.bottleneck.__main__.run_cprofile |
High EPSS 0.56% |
< 0.0.28 | 0.0.28 |
| GHSA-9gvj-pp9x-gcfr Picklescan has pickle parsing logic flaw that leads to malicious pickle file bypass |
Critical EPSS 0.60% |
< 0.0.27 | 0.0.27 |
| GHSA-9gvj-pp9x-gcfr Picklescan has pickle parsing logic flaw that leads to malicious pickle file bypass |
Critical EPSS 0.60% |
< 0.0.27 | 0.0.27 |
| GHSA-4p4h-9gvq-7xfg Duplicate Advisory: Picklescan Vulnerable to Exfiltration via DNS via linecache and ssl.get_server_certificate Withdrawn |
Medium | all versions | No fix yet |
| GHSA-v7x6-rv5q-mhwc Picklescan missing detection when calling built-in python library function timeit.timeit() |
Medium EPSS 0.55% |
< 0.0.25 | 0.0.25 |
| GHSA-v7x6-rv5q-mhwc Picklescan missing detection when calling built-in python library function timeit.timeit() |
Medium EPSS 0.55% |
< 0.0.25 | 0.0.25 |
| GHSA-fj43-3qmq-673f Picklescan failed to detect to some unsafe global function in Numpy library |
Medium EPSS 0.63% |
< 0.0.25 | 0.0.25 |
| GHSA-93mv-x874-956g Picklescan Vulnerable to Exfiltration via DNS via linecache and ssl.get_server_certificate |
High EPSS 0.23% |
< 0.0.25 | 0.0.25 |
| GHSA-93mv-x874-956g Picklescan Vulnerable to Exfiltration via DNS via linecache and ssl.get_server_certificate |
High EPSS 0.23% |
< 0.0.25 | 0.0.25 |
| GHSA-2fh4-gpch-vqv4 Duplicate Advisory: Zip Flag Bit Exploit Crashes Picklescan But Not PyTorch Withdrawn |
Medium | < 0.0.23 | 0.0.23 |
| GHSA-w6mr-mj53-x258 Duplicate Advisory: Zip Exploit Crashes Picklescan But Not PyTorch Withdrawn |
Medium | < 0.0.23 | 0.0.23 |
| GHSA-w8jq-xcqf-f792 Zip Flag Bit Exploit Crashes Picklescan But Not PyTorch |
Critical EPSS 0.55% |
< 0.0.23 | 0.0.23 |
| GHSA-w8jq-xcqf-f792 Zip Flag Bit Exploit Crashes Picklescan But Not PyTorch |
Critical EPSS 0.55% |
< 0.0.23 | 0.0.23 |
| GHSA-7q5r-7gvp-wc82 Zip Exploit Crashes Picklescan But Not PyTorch |
Medium EPSS 0.33% |
< 0.0.23 | 0.0.23 |
| GHSA-7q5r-7gvp-wc82 Zip Exploit Crashes Picklescan But Not PyTorch |
Medium EPSS 0.33% |
< 0.0.23 | 0.0.23 |
| GHSA-hw34-rqc5-h2gm Duplicate Advisory: Picklescan Allows Remote Code Execution via Malicious Pickle File Bypassing Static Analysis Withdrawn |
Medium | <= 0.0.21 | No fix yet |
| GHSA-vr75-hjh9-7fr6 Duplicate Advisory: Remote Code Execution via Malicious Pickle File Bypassing Static Analysis Withdrawn |
Medium | <= 0.0.21 | No fix yet |
| GHSA-655q-fx9r-782v Picklescan Allows Remote Code Execution via Malicious Pickle File Bypassing Static Analysis |
Critical EPSS 1.72% |
< 0.0.22 | 0.0.22 |
| GHSA-655q-fx9r-782v Picklescan Allows Remote Code Execution via Malicious Pickle File Bypassing Static Analysis |
Critical EPSS 1.72% |
< 0.0.21 | 0.0.21 |
| GHSA-655q-fx9r-782v Picklescan Allows Remote Code Execution via Malicious Pickle File Bypassing Static Analysis |
Critical EPSS 1.72% |
< 0.0.22 | 0.0.22 |
| GHSA-655q-fx9r-782v Picklescan Allows Remote Code Execution via Malicious Pickle File Bypassing Static Analysis |
Critical EPSS 1.72% |
< 0.0.22 | 0.0.22 |
MergeHarbor checks every repository's dependencies against this database, ranks what matters by exploitability and reachability, routes it to the owning team and opens the fix pull request.
Check your repos with MergeHarbor