PYSEC-2025-18
See a problem?- Import Source
- https://github.com/pypa/advisory-database/blob/main/vulns/picklescan/PYSEC-2025-18.yaml
- JSON Data
- https://api.osv.dev/v1/vulns/PYSEC-2025-18
- Aliases
- Published
- 2025-02-26T15:15:24Z
- Modified
- 2025-04-09T17:59:23.478228Z
- Summary
- [none]
- Details
-
picklescan before 0.0.21 does not treat 'pip' as an unsafe global. An attacker could craft a malicious model that uses Pickle to pull in a malicious PyPI package (hosted, for example, on pypi.org or GitHub) via
pip.main(). Because pip is not a restricted global, the model, when scanned with picklescan, would pass security checks and appear to be safe, when it could instead prove to be problematic. - References
Affected packages
PyPI / picklescan
Package
- Name
- picklescan
- View open source insights on deps.dev
- Purl
- pkg:pypi/picklescan