543 matches found
PickleScan has multiple stdlib modules with direct RCE not in blocklist
Summarypicklescan v1.0.3 latest does not block at least 7 Python standard library modules that provide direct arbitrary command execution or code evaluation. A malicious pickle file importing these modules is reported as having 0 issues CLEAN scan. This enables remote code execution that bypasses...
9.8CVSS6.4AI score0.01147EPSS
SaveExploits0References7Affected Software1
20