picklescan
Security scanner detecting Python Pickle files performing suspicious actions
Security Advisories for picklescan in pypi
Critical
9 months ago
PickleScan has multiple stdlib modules with direct RCE not in blocklist
pypi
picklescan
Critical
9 months ago
PickleScan's pkgutil.resolve_name has a universal blocklist bypass
pypi
picklescan
Critical
9 months ago
PickleScan's profile.run blocklist mismatch allows exec() bypass
pypi
picklescan
Moderate
10 months ago
picklescan vulnerable to arbitrary file create using logging.FileHandler
pypi
picklescan
High
10 months ago
picklescan missing detection by simple obfuscation of a `builtins.eval` call
pypi
picklescan
High
11 months ago
Picklescan is vulnerable to RCE via missing detection when calling built-in python _operator.attrgetter
pypi
picklescan
High
11 months ago
Picklescan is vulnerable to RCE via missing detection when calling built-in python _operator.methodcaller
pypi
picklescan
Moderate
11 months ago
Picklescan is vulnerable to RCE through missing detection when calling numpy.f2py.crackfortran._eval_length
pypi
picklescan
High
11 months ago
Picklescan is vulnerable to RCE via missing detection when calling numpy.f2py.crackfortran.getlincoef
pypi
picklescan
Moderate
11 months ago
Picklescan is vulnerable to RCE via missing detection when calling numpy.f2py.crackfortran.param_eval
pypi
picklescan
High
11 months ago
Picklescan is vulnerable to RCE through missing detection when calling numpy.f2py.crackfortran.myeval
pypi
picklescan
High
11 months ago
Picklescan is vulnerable to RCE through missing detection when calling built-in python operator.methodcaller
pypi
picklescan
High
11 months ago
Picklescan missing detection when calling numpy.f2py.crackfortran.getlincoef
pypi
picklescan
Critical
about 1 year ago
Picklescan: ZIP archive scan bypass is possible through non-exhaustive Cyclic Redundancy Check
pypi
picklescan
Critical
about 1 year ago
Picklescan is Vulnerable to Unsafe Globals Check Bypass through Subclass Imports
pypi
picklescan
Moderate
about 1 year ago
Picklescan is missing detection when calling built-in python library asyncio.unix_events._UnixSubprocessTransport._start
pypi
picklescan
Moderate
about 1 year ago
Picklescan is missing detection when calling built-in python cProfile.run
pypi
picklescan
Moderate
about 1 year ago
Picklescan is missing detection when calling built-in Python cProfile.runctx
pypi
picklescan
Moderate
about 1 year ago
Picklescan is missing detection when calling built-in python doctest.debug_script
pypi
picklescan
High
about 1 year ago
Picklescan is missing detection when calling built-in python idlelib.pyshell.ModifiedInterpreter.runcode
pypi
picklescan
High
about 1 year ago
Picklescan is missing detection when calling built-in python idlelib.pyshell.ModifiedInterpreter.runcommand
pypi
picklescan
Moderate
about 1 year ago
Picklescan is missing detection when calling built-in python idlelib.run.Executive.runcode
pypi
picklescan
Moderate
about 1 year ago
Picklescan is missing detection when calling built-in python lib2to3.pgen2.pgen.ParserGenerator.make_label
pypi
picklescan
High
about 1 year ago
Picklescan is missing detection when calling built-in python ensurepip._run_pip
pypi
picklescan
Moderate
about 1 year ago
Picklescan is missing detection when calling pytorch function torch.utils.bottleneck.__main__.run_autograd_prof
pypi
picklescan
Moderate
about 1 year ago
Picklescan has a missing detection when calling built-in python library idlelib.calltip.get_entity
pypi
picklescan
High
about 1 year ago
Picklescan has a missing detection when calling built-in python idlelib.calltip.Calltip
pypi
picklescan
Moderate
about 1 year ago
Picklescan has a missing detection when calling built-in python code.InteractiveInterpreter
pypi
picklescan
High
about 1 year ago
Picklescan has a missing detection when calling built-in python idlelib.autocomplete.AutoComplete.fetch_completions
pypi
picklescan
High
about 1 year ago
Picklescan has a missing detection when calling built-in python idlelib.autocomplete.AutoComplete.get_entity
pypi
picklescan
High
about 1 year ago
Picklescan has a missing detection when calling built-in python idlelib.debugobj.ObjectTreeItem
pypi
picklescan
Moderate
about 1 year ago
Picklescan has a missing detection when calling built-in python lib2to3.pgen2.grammar.Grammar.loads
pypi
picklescan
High
about 1 year ago
Picklescan has a missing detection when calling built-in python profile.Profile.runctx
pypi
picklescan
Moderate
about 1 year ago
Picklescan has a missing detection when calling built-in python profile.Profile.run
pypi
picklescan
Moderate
about 1 year ago
Picklescan has a missing detection when calling built-in python trace.Trace.runctx
pypi
picklescan
Moderate
about 1 year ago
Picklescan has a missing detection when calling built-in python trace.Trace.run
pypi
picklescan
High
about 1 year ago
Picklescan is missing detection when calling pytorch function torch.utils._config_module.load_config
pypi
picklescan
High
about 1 year ago
Picklescan missing detection when calling pytorch function torch.jit.unsupported_tensor_ops.execWrapper
pypi
picklescan
Moderate
about 1 year ago
Picklescan missing detection when calling pytorch function torch.utils.data.datapipes.utils.decoder.basichandlers
pypi
picklescan
Moderate
about 1 year ago
Picklescan missing detection when calling pytorch function torch.utils.collect_env.run
pypi
picklescan
Moderate
about 1 year ago
Picklescan missing detection when calling pytorch function torch.fx.experimental.symbolic_shapes.ShapeEnv.evaluate_guards_expression
pypi
picklescan
Moderate
about 1 year ago
Picklescan missing detection when calling pytorch function torch._dynamo.guards.GuardBuilder.get
pypi
picklescan
Moderate
about 1 year ago
Picklescan missing detection when calling pytorch function torch.utils.bottleneck.__main__.run_cprofile
pypi
picklescan
High
over 1 year ago
Picklescan has pickle parsing logic flaw that leads to malicious pickle file bypass
pypi
picklescan
Moderate
over 1 year ago
Picklescan missing detection when calling built-in python library function timeit.timeit()
pypi
picklescan
Moderate
over 1 year ago
Picklescan failed to detect to some unsafe global function in Numpy library
pypi
picklescan
High
over 1 year ago
Picklescan Vulnerable to Exfiltration via DNS via linecache and ssl.get_server_certificate
pypi
picklescan
Moderate
over 1 year ago
Picklescan Allows Remote Code Execution via Malicious Pickle File Bypassing Static Analysis
pypi
picklescan
Moderate
over 1 year ago
PyTorch Model Files Can Bypass Pickle Scanners via Unexpected Pickle Extensions
pypi
picklescan