Vulnerabilities in picklescan

51 results
Vexday analysis

O picklescan apresenta 46 vulnerabilidades catalogadas, todas publicadas nos últimos 90 dias, indicando risco recente e em evolução. Oito dessas vulnerabilidades são críticas (CVSS alto), predominantemente relacionadas à desserialização insegura (CWE-502), que permite execução remota de código. Embora nenhuma esteja sob ataque ativo documentado no momento, o volume concentrado de divulgações recentes exige atenção imediata em ambientes que processam dados serializados de fontes não confiáveis.

CVE-2026-53873CRITICALpicklescan - Arbitrary Code Execution via profile.run() Blocklist BypassEPSS 0.5%CVE-2025-71367HIGHpicklescan - Remote Code Execution via _operator.attrgetter Detection BypassEPSS 0.4%CVE-2025-71347HIGHpicklescan - Undetected Remote Code Execution via numpy.f2py.crackfortran.param_evalEPSS 0.4%CVE-2025-71366HIGHpicklescan - Arbitrary Code Execution via torch.utils.bottleneck.__main__.run_cprofileEPSS 0.4%CVE-2025-71369HIGHpicklescan - Unsafe Deserialization via torch.utils.data.datapipes.utils.decoder.basichandlersEPSS 0.4%CVE-2025-71373HIGHpicklescan - Remote Code Execution via operator.methodcaller Detection BypassEPSS 0.4%CVE-2026-56304MEDIUMpicklescan - Arbitrary File Creation via logging.FileHandler DeserializationEPSS 0.4%CVE-2026-53875HIGHpicklescan - Scanning Bypass via Dynamic Eval in scan_pytorchEPSS 0.4%CVE-2025-71358HIGHpicklescan - Remote Code Execution via idlelib.autocomplete.AutoComplete.get_entityEPSS 0.4%CVE-2025-71342HIGHpicklescan - Undetected Remote Code Execution via idlelib.run.Executive.runcodeEPSS 0.4%CVE-2025-71345HIGHpicklescan - Arbitrary Code Execution via torch.utils.bottleneck.__main__.run_autograd_profEPSS 0.4%CVE-2025-71359HIGHpicklescan - Unsafe Deserialization via lib2to3.pgen2.grammar.Grammar.loadsEPSS 0.4%CVE-2025-71348HIGHpicklescan - Arbitrary Code Execution via torch.utils._config_module.load_config BypassEPSS 0.4%CVE-2025-71350HIGHpicklescan - Undetected Remote Code Execution via torch.utils.collect_env.runEPSS 0.4%CVE-2025-71322HIGHPickleScan - Unsafe Globals Check Bypass via pty.spawn FunctionEPSS 0.4%CVE-2025-71372HIGHPicklescan - Arbitrary Code Execution via numpy.f2py.crackfortran.getlincoef GadgetEPSS 0.4%CVE-2025-71370HIGHpicklescan - Remote Code Execution via torch.jit.unsupported_tensor_ops.execWrapperEPSS 0.4%CVE-2025-71375HIGHpicklescan - Undetected Remote Code Execution via _operator.methodcallerEPSS 0.4%CVE-2025-71361HIGHpicklescan - Remote Code Execution via Undetected idlelib.calltip.Calltip.fetch_tipEPSS 0.3%CVE-2025-71378HIGHpicklescan - Remote Code Execution via Undetected cProfile.runctx in Pickle FilesEPSS 0.3%