Количество 2
Количество 2
CVE-2025-71354
picklescan before 0.0.29 fails to detect malicious pickle files that exploit idlelib.debugobj.ObjectTreeItem.SetText function in reduce methods. Attackers can craft pickle files with embedded code that bypasses picklescan detection and executes arbitrary commands when pickle.load() is called.
GHSA-3vg9-h568-4w9m
Picklescan has a missing detection when calling built-in python idlelib.debugobj.ObjectTreeItem
Уязвимостей на страницу
Уязвимость | CVSS | EPSS | Опубликовано | |
|---|---|---|---|---|
 | CVE-2025-71354 picklescan before 0.0.29 fails to detect malicious pickle files that exploit idlelib.debugobj.ObjectTreeItem.SetText function in reduce methods. Attackers can craft pickle files with embedded code that bypasses picklescan detection and executes arbitrary commands when pickle.load() is called. | CVSS3: 8.1 | 0% Низкий | 2 месяца назад |
| GHSA-3vg9-h568-4w9m Picklescan has a missing detection when calling built-in python idlelib.debugobj.ObjectTreeItem | CVSS3: 8.1 | 0% Низкий | около 1 года назад |
Уязвимостей на страницу