CVE-2025-1716: fallo de gravedad media en mmaitre314 picklescan
picklescan - Security scanning bypass via 'pip main'
Publicada el · Actualizada el
Aviso por correo cuando entre en el KEV, tenga PoC pública o suba de nota.
13Vexday Risk Score
Sin señal de explotación. Ningún artefacto público de explotación conocido hasta ahora.
ssvc Trackcvss 5.3epss 1.7%
picklescan before 0.0.21 does not treat 'pip' as an unsafe global. An attacker could craft a malicious model that uses Pickle to pull in a malicious PyPI package (hosted, for example, on pypi.org or GitHub) via `pip.main()`. Because pip is not a restricted global, the model, when scanned with picklescan, would pass security checks and appear to be safe, when it could instead prove to be problematic.
CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:P/VC:N/VI:L/VA:N/SC:N/SI:N/SA:N
Productos afectados
mmaitre314 · picklescanCVEs relacionadas — mmaitre314 picklescan
En el mismo producto, de las más peligrosas a las menos.
CVE-2025-10156CRITICALPickleScan Security Bypass via Bad CRC in ZIP ArchiveEPSS 1.5%CVE-2025-10155CRITICALPickleScan Security Bypass Using Misleading File ExtensionEPSS 0.8%CVE-2025-10157CRITICALPickleScan Bypasses Unsafe Globals Check Using Submodule ImportsEPSS 0.8%CVE-2025-1945MEDIUMpicklescan - Zip Flag Bit Exploit Crashes Picklescan But Not PyTorchEPSS 0.6%CVE-2025-1889MEDIUMpicklescan - Security scanning bypass via non-standard file extensionsEPSS 0.4%CVE-2025-1944MEDIUMpicklescan ZIP archive manipulation attack leads to crashEPSS 0.3%