picklescan vulnerabilities

By year

Bars are flaws published each year; the red part is the share attackers have used.

Latest high and critical flaws

• CVE-2025-71375 picklescan before 0.0.34 fails to detect the _operator.methodcaller built-in function when scanning pickle files for malicious code.High 7.6 · Jul 3, 2026
• CVE-2025-71373 picklescan before 0.0.33 fails to detect operator.methodcaller function calls in pickle files, allowing attackers to bypass security checks.High 7.6 · Jul 3, 2026
• CVE-2025-71372 Picklescan before 0.0.33 fails to detect the numpy.f2py.crackfortran.getlincoef gadget in pickle __reduce__ methods, allowing arbitrary code execution.High 7.6 · Jul 3, 2026
• CVE-2025-71369 picklescan before 0.0.28 fails to detect malicious pickle files that use torch.utils.data.datapipes.utils.decoder.basichandlers in reduce methods, allowing attaHigh 7.6 · Jul 3, 2026
• CVE-2025-71367 picklescan before 0.0.34 fails to detect _operator.attrgetter function calls in pickle payloads, allowing attackers to bypass security checks.High 7.6 · Jul 3, 2026
• CVE-2025-71366 picklescan before 0.0.28 fails to detect malicious torch.utils.bottleneck.__main__.run_cprofile function calls in pickle files, allowing attackers to bypass safHigh 7.6 · Jul 3, 2026
• CVE-2025-71364 picklescan before 0.0.30 fails to detect the asyncio.unix_events._UnixSubprocessTransport._start function in pickle reduce methods, allowing remote code executiHigh 7.6 · Jul 3, 2026
• CVE-2025-71362 picklescan before 0.0.33 fails to detect unsafe deserialization when numpy.f2py.crackfortran functions call eval on arbitrary strings.High 7.6 · Jul 3, 2026
• CVE-2025-71360 picklescan before 0.0.29 fails to detect malicious pickle files using idlelib.calltip.get_entity function in reduce methods.High 7.6 · Jul 3, 2026
• CVE-2025-71359 picklescan before 0.0.29 fails to detect malicious pickle payloads that utilize lib2to3.pgen2.grammar.Grammar.loads in the reduce method, allowing remote code eHigh 7.6 · Jul 3, 2026
• CVE-2025-71356 picklescan before 0.0.28 fails to detect malicious torch.fx.experimental.symbolic_shapes.ShapeEnv.evaluate_guards_expression function calls in pickle files.High 7.6 · Jul 3, 2026
• CVE-2025-71353 picklescan before 0.0.28 fails to detect malicious pickle files that exploit torch._dynamo.guards.GuardBuilder.get function in reduce methods.High 7.6 · Jul 3, 2026
• CVE-2025-71347 picklescan before 0.0.33 fails to detect malicious pickle files using numpy.f2py.crackfortran.param_eval function in reduce methods, allowing attackers to bypasHigh 7.6 · Jul 3, 2026
• CVE-2025-71345 picklescan before 0.0.30 fails to detect malicious pickle files that invoke torch.utils.bottleneck.__main__.run_autograd_prof function.High 7.6 · Jul 3, 2026
• CVE-2025-71343 picklescan before 0.0.30 fails to detect malicious pickle files that exploit lib2to3.pgen2.pgen.ParserGenerator.make_label function in the reduce method.High 7.6 · Jul 3, 2026
• CVE-2025-71342 picklescan before 0.0.30 fails to detect malicious pickle files using idlelib.run.Executive.runcode in reduce methods.High 7.6 · Jul 3, 2026
• CVE-2025-71374 picklescan before 0.0.29 fails to detect the built-in python profile.Profile.run function when used in pickle reduce methods, allowing attackers to execute arbiHigh 7.6 · Jun 30, 2026
• CVE-2025-71371 picklescan before 0.0.29 fails to detect malicious pickle files using code.InteractiveInterpreter.runcode in reduce methods.High 7.6 · Jun 30, 2026
• CVE-2025-71368 picklescan before 0.0.30 fails to detect the doctest.debug_script function when analyzing pickle files, allowing attackers to execute arbitrary code.High 7.6 · Jun 30, 2026
• CVE-2025-71363 picklescan before 0.0.30 fails to detect cProfile.run function calls in pickle reduce methods, allowing attackers to execute arbitrary code.High 7.6 · Jun 30, 2026
• CVE-2025-71355 Picklescan before 0.0.25 fails to detect unsafe global functions in the Numpy library, allowing attackers to bypass static analysis and execute arbitrary code dHigh 7.6 · Jun 30, 2026
• CVE-2025-71352 picklescan before 0.0.29 fails to detect the built-in Python trace.Trace.runctx function when used in pickle file reduce methods, allowing attackers to execute High 7.6 · Jun 30, 2026
• CVE-2025-71350 picklescan before 0.0.28 fails to detect malicious pickle files using torch.utils.collect_env.run function in reduce methods.High 7.6 · Jun 30, 2026
• CVE-2025-71349 picklescan before 0.0.29 fails to detect the built-in trace.Trace.run function when analyzing pickle files, allowing attackers to embed undetected malicious codHigh 7.6 · Jun 30, 2026
• CVE-2025-71340 picklescan through 0.0.26 fails to detect malicious pickle files that invoke idlelib.pyshell.ModifiedInterpreter.runcode in __reduce__ methods.High 7.6 · Jun 25, 2026