Vulnerabilities

search
ID
Packages
Summary
Published
arrow_upward
Attributes
PYSEC-2026-4134
  • PyPI/picklescan
 PickleScan has multiple stdlib modules with direct RCE not in blocklist yesterday
  • Fix available
  • Severity - 9.8 (Critical)
PYSEC-2026-4131
  • PyPI/picklescan
 Picklescan is vulnerable to RCE through missing detection when calling numpy.f2py.crackfortran.myeval yesterday
  • Fix available
  • Severity - 7.6 (High)
PYSEC-2026-4133
  • PyPI/picklescan
 Picklescan has a missing detection when calling built-in python idlelib.autocomplete.AutoComplete.fetch_completions yesterday
  • Fix available
  • Severity - 7.6 (High)
PYSEC-2026-4132
  • PyPI/picklescan
 Picklescan has a missing detection when calling built-in python profile.Profile.runctx yesterday
  • Fix available
  • Severity - 7.6 (High)
PYSEC-2026-4136
  • PyPI/picklescan
 Picklescan missing detection when calling pytorch function torch.jit.unsupported_tensor_ops.execWrapper yesterday
  • Fix available
  • Severity - 7.6 (High)
PYSEC-2026-4135
  • PyPI/picklescan
 Picklescan missing detection when calling built-in python library function timeit.timeit() yesterday
  • Fix available
  • Severity - 5.3 (Medium)
PYSEC-2026-2873
  • PyPI/picklescan
 Picklescan (scan_pytorch) Bypass via dynamic eval MAGIC_NUMBER 13 Jul
  • Fix available
  • Severity - 7.1 (High)
PYSEC-2026-1789
  • PyPI/picklescan
 picklescan missing detection by simple obfuscation of a `builtins.eval` call 07 Jul
  • Fix available
  • Severity - 8.9 (High)
PYSEC-2026-1787
  • PyPI/picklescan
 picklescan has Arbitrary file read using `io.FileIO` 07 Jul
  • Fix available
  • Severity - 7.7 (High)
PYSEC-2026-1783
  • PyPI/picklescan
 Picklescan is vulnerable to RCE through missing detection when calling numpy.f2py.crackfortran._eval_length 07 Jul
  • Fix available
  • Severity - 6.7 (Medium)
PYSEC-2026-1790
  • PyPI/picklescan
 Picklescan Bypasses Unsafe Globals Check using pty.spawn 07 Jul
  • Fix available
  • Severity - 8.8 (High)
PYSEC-2026-1785
  • PyPI/picklescan
 Picklescan has Incomplete List of Disallowed Inputs 07 Jul
  • Fix available
  • Severity - 8.9 (High)
PYSEC-2026-1782
  • PyPI/picklescan
 Picklescan does not block ctypes 07 Jul
  • Fix available
  • Severity - 8.9 (High)
PYSEC-2026-1791
  • PyPI/picklescan
 Picklescan vulnerable to Arbitrary File Writing 07 Jul
  • Fix available
  • Severity - 8.9 (High)
PYSEC-2026-1792
  • PyPI/picklescan
 Picklescan is missing detection when calling built-in python ensurepip._run_pip 07 Jul
  • Fix available
PYSEC-2026-1786
  • PyPI/picklescan
 Picklescan has a missing detection when calling built-in python idlelib.calltip.Calltip 07 Jul
  • Fix available
Load more...