CVE-2025-71342 HIGH 7.6 Picklescan — picklescan before 0.0.30 fails to detect malicious pickle files using idlelib.run.Executive.runcode in reduce …● PoC 2026-07-04 CVE-2025-71343 HIGH 7.6 Picklescan — picklescan before 0.0.30 fails to detect malicious pickle files that exploit lib2to3.pgen2.pgen.ParserGenerato…● PoC 2026-07-04 CVE-2025-71345 HIGH 7.6 Picklescan — picklescan before 0.0.30 fails to detect malicious pickle files that invoke torch.utils.bottleneck.__main__.ru…● PoC 2026-07-04 CVE-2025-71347 HIGH 7.6 Picklescan — picklescan before 0.0.33 fails to detect malicious pickle files using numpy.f2py.crackfortran.param_eval funct…● PoC 2026-07-04 CVE-2025-71353 HIGH 7.6 Picklescan — picklescan before 0.0.28 fails to detect malicious pickle files that exploit torch._dynamo.guards.GuardBuilder…● PoC 2026-07-04 CVE-2025-71356 HIGH 7.6 Picklescan — picklescan before 0.0.28 fails to detect malicious torch.fx.experimental.symbolic_shapes.ShapeEnv.evaluate_gua…● PoC 2026-07-04 CVE-2025-71359 HIGH 7.6 Picklescan — picklescan before 0.0.29 fails to detect malicious pickle payloads that utilize lib2to3.pgen2.grammar.Grammar.…● PoC 2026-07-04 CVE-2025-71360 HIGH 7.6 Picklescan — picklescan before 0.0.29 fails to detect malicious pickle files using idlelib.calltip.get_entity function in r…● PoC 2026-07-04 CVE-2025-71362 HIGH 7.6 Picklescan — picklescan before 0.0.33 fails to detect unsafe deserialization when numpy.f2py.crackfortran functions call ev…● PoC 2026-07-04 CVE-2025-71364 HIGH 7.6 Picklescan — picklescan before 0.0.30 fails to detect the asyncio.unix_events._UnixSubprocessTransport._start function in p…● PoC 2026-07-04 CVE-2025-71366 HIGH 7.6 Picklescan — picklescan before 0.0.28 fails to detect malicious torch.utils.bottleneck.__main__.run_cprofile function calls…● PoC 2026-07-04 CVE-2025-71367 HIGH 7.6 Picklescan — picklescan before 0.0.34 fails to detect _operator.attrgetter function calls in pickle payloads, allowing atta…● PoC 2026-07-04 CVE-2025-71369 HIGH 7.6 Picklescan — picklescan before 0.0.28 fails to detect malicious pickle files that use torch.utils.data.datapipes.utils.deco…● PoC 2026-07-04 CVE-2025-71372 HIGH 7.6 Picklescan — Picklescan before 0.0.33 fails to detect the numpy.f2py.crackfortran.getlincoef gadget in pickle __reduce__ me…● PoC 2026-07-04 CVE-2025-71373 HIGH 7.6 Picklescan — picklescan before 0.0.33 fails to detect operator.methodcaller function calls in pickle files, allowing attack…● PoC 2026-07-04 CVE-2025-71375 HIGH 7.6 Picklescan — picklescan before 0.0.34 fails to detect the _operator.methodcaller built-in function when scanning pickle fil…● PoC 2026-07-04 CVE-2025-71349 HIGH 7.6 Picklescan — picklescan before 0.0.29 fails to detect the built-in trace.Trace.run function when analyzing pickle files, al…● PoC 2026-06-30 CVE-2025-71350 HIGH 7.6 Picklescan — picklescan before 0.0.28 fails to detect malicious pickle files using torch.utils.collect_env.run function in …● PoC 2026-06-30 CVE-2025-71352 HIGH 7.6 Picklescan — picklescan before 0.0.29 fails to detect the built-in Python trace.Trace.runctx function when used in pickle f…● PoC 2026-06-30 CVE-2025-71355 HIGH 7.6 Picklescan — Picklescan before 0.0.25 fails to detect unsafe global functions in the Numpy library, allowing attackers to b…● PoC 2026-06-30 CVE-2025-71363 HIGH 7.6 Picklescan — picklescan before 0.0.30 fails to detect cProfile.run function calls in pickle reduce methods, allowing attack…● PoC 2026-06-30 CVE-2025-71368 HIGH 7.6 Picklescan — picklescan before 0.0.30 fails to detect the doctest.debug_script function when analyzing pickle files, allowi…● PoC 2026-06-30 CVE-2025-71371 HIGH 7.6 Picklescan — picklescan before 0.0.29 fails to detect malicious pickle files using code.InteractiveInterpreter.runcode in r…● PoC 2026-06-30 CVE-2025-71374 HIGH 7.6 Picklescan — picklescan before 0.0.29 fails to detect the built-in python profile.Profile.run function when used in pickle …● PoC 2026-06-30 CVE-2025-71340 HIGH 7.6 Picklescan — picklescan through 0.0.26 fails to detect malicious pickle files that invoke idlelib.pyshell.ModifiedInterpret…● PoC 2026-06-25 CVE-2025-71354 HIGH 7.6 Picklescan — picklescan before 0.0.29 fails to detect malicious pickle files that exploit idlelib.debugobj.ObjectTreeItem.S…● PoC 2026-06-24 CVE-2025-71361 HIGH 7.6 Picklescan — picklescan before 0.0.29 fails to detect malicious idlelib.calltip.Calltip.fetch_tip calls in pickle files, al…● PoC 2026-06-24 CVE-2026-56315 CRITICAL 9.3 Picklescan — picklescan before 1.0.4 fails to block at least seven Python standard library modules (including uuid, _osx_su…● PoC 2026-06-23 CVE-2025-71341 HIGH 7.6 Picklescan — picklescan before 0.0.29 fails to detect the profile.Profile.runctx function when analyzing pickle files, allo…● PoC 2026-06-23 CVE-2025-71365 HIGH 7.6 Picklescan — picklescan before 0.0.33 fails to detect malicious pickle files that invoke numpy.f2py.crackfortran.myeval fun…● PoC 2026-06-23 CVE-2025-71370 HIGH 7.6 Picklescan — picklescan before 0.0.28 fails to detect malicious torch.jit.unsupported_tensor_ops.execWrapper function calls…● PoC 2026-06-23 CVE-2025-71376 HIGH 7.6 Picklescan — picklescan before 0.0.29 fails to detect malicious pickle files using idlelib.autocomplete.AutoComplete.fetch_…● PoC 2026-06-23 CVE-2025-71339 HIGH 7.6 Picklescan — Picklescan before 0.0.33 fails to detect the numpy.f2py.crackfortran._eval_length gadget in pickle __reduce__ …● PoC 2026-06-22 CVE-2025-71344 HIGH 7.6 Picklescan — picklescan before 0.0.30 (affected versions 0.0.26 and earlier) fails to detect the ensurepip._run_pip built-i…● PoC 2026-06-22 CVE-2025-71358 HIGH 7.6 Picklescan — picklescan before 0.0.29 fails to detect malicious pickle files that exploit idlelib.autocomplete.AutoComplete…● PoC 2026-06-22 CVE-2025-71348 HIGH 7.6 Picklescan — picklescan before 0.0.28 fails to detect malicious pickle files that invoke torch.utils._config_module.load_co…● PoC 2026-06-21 CVE-2025-71351 HIGH 7.6 Picklescan — picklescan before 0.0.25 fails to detect malicious pickle files that use timeit.timeit() in the __reduce__ met…● PoC 2026-06-21 CVE-2025-71357 HIGH 7.6 Picklescan — picklescan before 0.0.30 fails to detect malicious pickle files using idlelib.pyshell.ModifiedInterpreter.runc…● PoC 2026-06-21 CVE-2025-71378 HIGH 7.6 Picklescan — picklescan before 0.0.30 fails to detect cProfile.runctx function calls in pickle file reduce methods, allowin…● PoC 2026-06-21 CVE-2026-56304 MEDIUM 6.9 Picklescan — picklescan before 1.0.1 contains an unsafe pickle deserialization vulnerability allowing unauthenticated attac…● PoC 2026-06-20 CVE-2026-3490 CRITICAL 10 Picklescan — picklescan before 1.0.4 fails to block pkgutil.resolve_name, allowing attackers to bypass the entire blocklist…● PoC 2026-06-17 CVE-2026-53872 HIGH 8.7 Picklescan — picklescan before 0.0.35 contains an unsafe pickle deserialization vulnerability allowing unauthenticated atta…● PoC 2026-06-17 CVE-2026-53873 CRITICAL 9.3 Picklescan — picklescan before 1.0.4 contains an incomplete blocklist for the profile module that fails to block the module…● PoC 2026-06-17 CVE-2026-53874 CRITICAL 9.3 Picklescan — picklescan before 1.0.1 contains an unsafe deserialization vulnerability allowing unauthenticated users to exe…● PoC 2026-06-17 CVE-2026-53875 HIGH 7.1 Picklescan — picklescan before 1.0.3 contains a scanning bypass vulnerability in the scan_pytorch function that allows atta…● PoC 2026-06-17 CVE-2025-71320 CRITICAL 9.3 Picklescan — picklescan before 0.0.33 contains an incomplete deny-list that fails to block pydoc.locate and operator.method…● PoC 2026-06-17 CVE-2025-71321 CRITICAL 9.3 Picklescan — picklescan before 0.0.33 contains an arbitrary file writing vulnerability that allows attackers to bypass the …● PoC 2026-06-17 CVE-2025-71322 HIGH 8.7 Picklescan — PickleScan before 0.0.33 fails to include the pty.spawn function in its unsafe globals list, allowing attacker…● PoC 2026-06-17 CVE-2025-71323 CRITICAL 9.3 Picklescan — picklescan before 0.0.33 fails to block the ctypes module, allowing attackers to achieve remote code execution…● PoC 2026-06-17 CVE-2025-71325 CRITICAL 9.3 Picklescan — picklescan before 0.0.27 contains a parsing logic error in the _list_globals function when handling STACK_GLOB…● PoC 2026-06-17