picklescan vulnerabilities (PyPI)
59 vulnerabilities.
-
picklescanPyPI picklescan - Remote Code Execution via Unblocked Standard Library Modules 9.3 Critical -
picklescanPyPI picklescan - Universal Blocklist Bypass via pkgutil.resolve_name 10.0 Critical -
picklescanPyPI picklescan - Arbitrary Code Execution via profile.run() Blocklist Bypass 9.3 Critical -
picklescanPyPI picklescan - Scanning Bypass via Dynamic Eval in scan_pytorch 7.1 High -
picklescanPyPI picklescan - Arbitrary File Creation via logging.FileHandler Deserialization 6.9 Medium -
picklescanPyPI picklescan - Arbitrary Code Execution via Obfuscated eval Call 9.3 Critical -
picklescanPyPI picklescan - Arbitrary File Read via Unsafe Pickle Deserialization 8.7 High -
picklescanPyPI picklescan - Remote Code Execution via _operator.attrgetter Detection Bypass 7.6 High -
picklescanPyPI picklescan - Undetected Remote Code Execution via _operator.methodcaller 7.6 High -
picklescanPyPI Picklescan - Arbitrary Code Execution via numpy.f2py.crackfortran._eval_length Gadget 7.6 High -
picklescanPyPI Picklescan - Arbitrary Code Execution via numpy.f2py.crackfortran.getlincoef Gadget 7.6 High -
picklescanPyPI picklescan - Undetected Remote Code Execution via numpy.f2py.crackfortran.param_eval 7.6 High -
picklescanPyPI picklescan - Arbitrary Code Execution via numpy.f2py.crackfortran.myeval Detection Bypass 7.6 High -
picklescanPyPI picklescan - Remote Code Execution via operator.methodcaller Detection Bypass 7.6 High -
picklescanPyPI picklescan - Arbitrary Code Execution via Unsafe Deserialization in numpy.f2py.crackfortran 7.6 High -
picklescanPyPI PickleScan - Unsafe Globals Check Bypass via pty.spawn Function 8.7 High -
picklescanPyPI Picklescan missing detection when calling pty.spawn 8.9 High -
picklescanPyPI picklescan - Remote Code Execution via Incomplete Disallowed Inputs 9.3 Critical -
picklescanPyPI picklescan - Remote Code Execution via Unblocked ctypes Module 9.3 Critical -
picklescanPyPI picklescan - Arbitrary File Writing via distutils Module Bypass 9.3 Critical -
picklescanPyPI PickleScan Security Bypass Using Misleading File Extension 9.3 Critical -
picklescanPyPI PickleScan Security Bypass via Bad CRC in ZIP Archive 9.3 Critical -
picklescanPyPI PickleScan Bypasses Unsafe Globals Check Using Submodule Imports 9.3 Critical -
picklescanPyPI picklescan - Arbitrary Code Execution via Undetected asyncio.unix_events._UnixSubprocessTransport._start 7.6 High -
picklescanPyPI picklescan - Arbitrary Code Execution via Undetected cProfile.run in Pickle Deserialization 7.6 High -
picklescanPyPI picklescan - Remote Code Execution via Undetected cProfile.runctx in Pickle Files 7.6 High -
picklescanPyPI picklescan - Arbitrary Code Execution via Undetected doctest.debug_script 7.6 High -
picklescanPyPI picklescan - Remote Code Execution via idlelib.pyshell.ModifiedInterpreter.runcode 7.6 High -
picklescanPyPI picklescan - Arbitrary Code Execution via Undetected idlelib.pyshell.ModifiedInterpreter.runcommand 7.6 High -
picklescanPyPI picklescan - Undetected Remote Code Execution via idlelib.run.Executive.runcode 7.6 High -
picklescanPyPI picklescan - Arbitrary Code Execution via lib2to3.pgen2.pgen.ParserGenerator.make_label Detection Bypass 7.6 High -
picklescanPyPI picklescan - Arbitrary Code Execution via Undetected ensurepip._run_pip Function 7.6 High -
picklescanPyPI picklescan - Arbitrary Code Execution via torch.utils.bottleneck.__main__.run_autograd_prof 7.6 High -
picklescanPyPI picklescan - Remote Code Execution via Undetected idlelib.calltip.get_entity 7.6 High -
picklescanPyPI picklescan - Remote Code Execution via Undetected idlelib.calltip.Calltip.fetch_tip 7.6 High -
picklescanPyPI picklescan - Remote Code Execution via code.InteractiveInterpreter Detection Bypass 7.6 High -
picklescanPyPI picklescan - Arbitrary Code Execution via Undetected idlelib.autocomplete.AutoComplete.fetch_completions 7.6 High -
picklescanPyPI picklescan - Remote Code Execution via idlelib.autocomplete.AutoComplete.get_entity 7.6 High -
picklescanPyPI picklescan - Remote Code Execution via idlelib.debugobj.ObjectTreeItem.SetText 7.6 High -
picklescanPyPI picklescan - Unsafe Deserialization via lib2to3.pgen2.grammar.Grammar.loads 7.6 High -
picklescanPyPI picklescan - Remote Code Execution via Undetected profile.Profile.runctx 7.6 High -
picklescanPyPI picklescan - Arbitrary Code Execution via Undetected profile.Profile.run 7.6 High -
picklescanPyPI picklescan - Remote Code Execution via Undetected trace.Trace.runctx in Pickle Files 7.6 High -
picklescanPyPI picklescan - Arbitrary Code Execution via Undetected trace.Trace.run in Pickle Files 7.6 High -
picklescanPyPI picklescan - Arbitrary Code Execution via torch.utils._config_module.load_config Bypass 7.6 High -
picklescanPyPI picklescan - Remote Code Execution via torch.jit.unsupported_tensor_ops.execWrapper 7.6 High -
picklescanPyPI picklescan - Unsafe Deserialization via torch.utils.data.datapipes.utils.decoder.basichandlers 7.6 High -
picklescanPyPI picklescan - Undetected Remote Code Execution via torch.utils.collect_env.run 7.6 High -
picklescanPyPI picklescan - Arbitrary Code Execution via torch.fx.experimental.symbolic_shapes.ShapeEnv.evaluate_guards_expression 7.6 High -
picklescanPyPI picklescan - Remote Code Execution via torch._dynamo.guards.GuardBuilder.get 7.6 High - Show olderLoading…