mmaitre314/picklescan Security Advisories | GitStock

high2025-08-26

Picklescan has a missing detection when calling built-in python profile.Profile.runctx

GHSA-6vqj-c2q5-j97w · CVE-2025-71341

medium2025-08-26

Picklescan has a missing detection when calling built-in python profile.Profile.run

GHSA-x696-vm39-cp64

medium2025-08-26

Picklescan has a missing detection when calling built-in python trace.Trace.runctx

GHSA-g344-hcph-8vgg

medium2025-08-26

Picklescan has a missing detection when calling built-in python trace.Trace.run

GHSA-5qwp-399c-mjwf

high2025-08-22

Picklescan is missing detection when calling pytorch function torch.utils._config_module.load_config

GHSA-vv6j-3g6g-2pvj · CVE-2025-71348

high2025-08-22

Picklescan missing detection when calling pytorch function torch.jit.unsupported_tensor_ops.execWrapper

GHSA-vr7h-p6mm-wpmh · CVE-2025-71370

medium2025-08-22

Picklescan missing detection when calling pytorch function torch.utils.data.datapipes.utils.decoder.basichandlers

GHSA-h3qp-7fh3-f8h4

medium2025-08-22

Picklescan missing detection when calling pytorch function torch.utils.collect_env.run

GHSA-f745-w6jp-hpxx

medium2025-08-22

Picklescan missing detection when calling pytorch function torch.fx.experimental.symbolic_shapes.ShapeEnv.evaluate_guards_expression

GHSA-f4x7-rfwp-v3xw

medium2025-08-22

Picklescan missing detection when calling pytorch function torch._dynamo.guards.GuardBuilder.get

GHSA-86cj-95qr-2p4f

medium2025-08-22

Picklescan missing detection when calling pytorch function torch.utils.bottleneck.__main__.run_cprofile

GHSA-4r9r-ch6f-vxmx

high2025-08-12

Picklescan has pickle parsing logic flaw that leads to malicious pickle file bypass

GHSA-9gvj-pp9x-gcfr · CVE-2025-71325

medium2025-04-07

Picklescan missing detection when calling built-in python library function timeit.timeit()

GHSA-v7x6-rv5q-mhwc · CVE-2025-71351

medium2025-04-07

Picklescan failed to detect to some unsafe global function in Numpy library

GHSA-fj43-3qmq-673f

high2025-04-07

Picklescan Vulnerable to Exfiltration via DNS via linecache and ssl.get_server_certificate

GHSA-93mv-x874-956g · CVE-2025-46417

medium2025-03-10

Zip Exploit Crashes Picklescan But Not PyTorch

GHSA-7q5r-7gvp-wc82 · CVE-2025-1944

medium2025-03-10

Zip Flag Bit Exploit Crashes Picklescan But Not PyTorch

GHSA-w8jq-xcqf-f792 · CVE-2025-1945

medium2025-03-03

Picklescan Allows Remote Code Execution via Malicious Pickle File Bypassing Static Analysis

GHSA-655q-fx9r-782v · CVE-2025-1716

medium2025-03-03

PyTorch Model Files Can Bypass Pickle Scanners via Unexpected Pickle Extensions

GHSA-769v-p64c-89pr · CVE-2025-1889