Vulnerabilities

search
ID
Packages
Summary
Published
arrow_upward
Attributes
PYSEC-2026-2873
  • PyPI/picklescan
 Picklescan (scan_pytorch) Bypass via dynamic eval MAGIC_NUMBER 13 Jul
  • Fix available
  • Severity - 7.1 (High)
PYSEC-2026-1789
  • PyPI/picklescan
 picklescan missing detection by simple obfuscation of a `builtins.eval` call 07 Jul
  • Fix available
  • Severity - 8.9 (High)
PYSEC-2026-1787
  • PyPI/picklescan
 picklescan has Arbitrary file read using `io.FileIO` 07 Jul
  • Fix available
  • Severity - 7.7 (High)
PYSEC-2026-1783
  • PyPI/picklescan
 Picklescan is vulnerable to RCE through missing detection when calling numpy.f2py.crackfortran._eval_length 07 Jul
  • Fix available
  • Severity - 6.7 (Medium)
PYSEC-2026-1790
  • PyPI/picklescan
 Picklescan Bypasses Unsafe Globals Check using pty.spawn 07 Jul
  • Fix available
  • Severity - 8.8 (High)
PYSEC-2026-1785
  • PyPI/picklescan
 Picklescan has Incomplete List of Disallowed Inputs 07 Jul
  • Fix available
  • Severity - 8.9 (High)
PYSEC-2026-1782
  • PyPI/picklescan
 Picklescan does not block ctypes 07 Jul
  • Fix available
  • Severity - 8.9 (High)
PYSEC-2026-1791
  • PyPI/picklescan
 Picklescan vulnerable to Arbitrary File Writing 07 Jul
  • Fix available
  • Severity - 8.9 (High)
PYSEC-2026-1792
  • PyPI/picklescan
 Picklescan is missing detection when calling built-in python ensurepip._run_pip 07 Jul
  • Fix available
PYSEC-2026-1786
  • PyPI/picklescan
 Picklescan has a missing detection when calling built-in python idlelib.calltip.Calltip 07 Jul
  • Fix available
PYSEC-2026-1784
  • PyPI/picklescan
 Picklescan has a missing detection when calling built-in python idlelib.autocomplete.AutoComplete.get_entity 07 Jul
  • Fix available
PYSEC-2026-1781
  • PyPI/picklescan
 Picklescan has a missing detection when calling built-in python idlelib.debugobj.ObjectTreeItem 07 Jul
  • Fix available
PYSEC-2026-1788
  • PyPI/picklescan
 Picklescan has pickle parsing logic flaw that leads to malicious pickle file bypass 07 Jul
  • Fix available
  • Severity - 8.9 (High)
PYSEC-2026-455
  • PyPI/picklescan
 PickleScan's profile.run blocklist mismatch allows exec() bypass 29 Jun
  • Fix available
  • Severity - 9.8 (Critical)
PYSEC-2026-456
  • PyPI/picklescan
 PickleScan's pkgutil.resolve_name has a universal blocklist bypass 29 Jun
  • Fix available
  • Severity - 10.0 (Critical)
PYSEC-2026-247
  • PyPI/picklescan
 See record for full details 21 Jun
  • Fix available
  • Severity - 7.8 (High)
Load more...