Trailofbits vulnerabilities

Products

• Fickling 11
• Rfc3161-client 2
• Uthenticode 2

Newest

• trailofbits fickling Fickling check_safety() bypass: dotted __qualname__ in STACK_GLOBAL resolves a class-method attribute path that evades call analysis CVE-2026-118938 8.8 HighOctober 30, 2026
• trailofbits fickling Fickling check_safety() bypass: likely_safe_imports grants module-origin trust to unvalidated standard library callables CVE-2026-16760 8.8 HighOctober 30, 2026
• trailofbits fickling Fickling MLAllowlist analysis pass rendered inoperative by shared mutable state in AnalysisContext.shorten_code() CVE-2026-14535 Fix available 8.8 HighJuly 4, 2026
• trailofbits fickling Fickling check_safety() bypass via unlisted standard library modules (_posixsubprocess, site, atexit) CVE-2026-14534 Fix available 8.8 HighJuly 4, 2026
• trailofbits rfc3161-client Improper Certificate Validation in rfc3161-client CVE-2026-33753 Fix available 6.2 MediumApril 8, 2026
• trailofbits fickling Fickling vulnerable to detection bypass due to "builtins" blindness CVE-2026-22612 Fix available 8.9 HighJanuary 9, 2026
• trailofbits fickling Fickling has Static Analysis Bypass via Incomplete Dangerous Module Blocklist CVE-2026-22609 Fix available 8.9 HighJanuary 9, 2026
• trailofbits fickling Fickling vulnerable to use of ctypes and pydoc gadget chain to bypass detection CVE-2026-22608 Fix available 8.9 HighJanuary 9, 2026
• trailofbits fickling Fickling Blocklist Bypass: cProfile.run() CVE-2026-22607 Fix available 8.9 HighJanuary 9, 2026
• trailofbits fickling Fickling has a bypass via runpy.run_path() and runpy.run_module() CVE-2026-22606 Fix available 8.9 HighJanuary 9, 2026
• trailofbits fickling Fickling has Code Injection vulnerability via pty.spawn() CVE-2025-67748 Fix available 7.1 HighDecember 15, 2025
• trailofbits fickling Fickling has missing detection for marshal.loads and types.FunctionType in unsafe modules list CVE-2025-67747 Fix available 7.1 HighDecember 15, 2025
• trailofbits rfc3161-client rfc3161-client has insufficient verification for timestamp response signatures CVE-2025-52556 Fix available 9.3 CriticalJune 20, 2025
• trailofbits uthenticode uthenticode signature validation bypass vulnerability CVE-2023-39969 9.1 CriticalAugust 9, 2023
• trailofbits uthenticode uthenticode EKU validation bypass CVE-2023-40012 5.9 MediumAugust 9, 2023