Vulnerabilities in Picklescan

51 results
Vexday analysis

Picklescan apresenta 4 vulnerabilidades catalogadas, com 3 divulgadas nos últimos 90 dias, indicando risco em evolução; nenhuma está sob exploração ativa conhecida (KEV) nem classificada como crítica, reduzindo a urgência imediata. A fraqueza dominante (CWE-184) sugere problema estrutural na validação de desserialização que merece atenção preventiva.

CVE-2025-71320CRITICALpicklescan - Remote Code Execution via Incomplete Disallowed InputsEPSS 0.6%CVE-2025-71342HIGHpicklescan - Undetected Remote Code Execution via idlelib.run.Executive.runcodeEPSS 0.6%CVE-2025-71359HIGHpicklescan - Unsafe Deserialization via lib2to3.pgen2.grammar.Grammar.loadsEPSS 0.6%CVE-2025-71341HIGHpicklescan - Remote Code Execution via Undetected profile.Profile.runctxEPSS 0.6%CVE-2025-71345HIGHpicklescan - Arbitrary Code Execution via torch.utils.bottleneck.__main__.run_autograd_profEPSS 0.6%CVE-2025-71349HIGHpicklescan - Arbitrary Code Execution via Undetected trace.Trace.run in Pickle FilesEPSS 0.6%CVE-2025-71361HIGHpicklescan - Remote Code Execution via Undetected idlelib.calltip.Calltip.fetch_tipEPSS 0.6%CVE-2025-71355HIGHPicklescan - Arbitrary Code Execution via Unsafe Numpy Function Detection BypassEPSS 0.6%CVE-2025-71348HIGHpicklescan - Arbitrary Code Execution via torch.utils._config_module.load_config BypassEPSS 0.6%CVE-2025-71370HIGHpicklescan - Remote Code Execution via torch.jit.unsupported_tensor_ops.execWrapperEPSS 0.5%CVE-2025-71372HIGHPicklescan - Arbitrary Code Execution via numpy.f2py.crackfortran.getlincoef GadgetEPSS 0.5%CVE-2025-71371HIGHpicklescan - Remote Code Execution via code.InteractiveInterpreter Detection BypassEPSS 0.5%CVE-2025-71375HIGHpicklescan - Undetected Remote Code Execution via _operator.methodcallerEPSS 0.5%CVE-2025-71339HIGHPicklescan - Arbitrary Code Execution via numpy.f2py.crackfortran._eval_length GadgetEPSS 0.5%CVE-2025-71378HIGHpicklescan - Remote Code Execution via Undetected cProfile.runctx in Pickle FilesEPSS 0.5%CVE-2025-71325CRITICALpicklescan - Detection Bypass via STACK_GLOBAL Opcode Parsing Logic FlawEPSS 0.5%CVE-2025-71354HIGHpicklescan - Remote Code Execution via idlelib.debugobj.ObjectTreeItem.SetTextEPSS 0.4%CVE-2026-56304MEDIUMpicklescan - Arbitrary File Creation via logging.FileHandler DeserializationEPSS 0.4%CVE-2025-71358HIGHpicklescan - Remote Code Execution via idlelib.autocomplete.AutoComplete.get_entityEPSS 0.4%CVE-2025-71350HIGHpicklescan - Undetected Remote Code Execution via torch.utils.collect_env.runEPSS 0.4%