Lucene search
+L

420 matches found

OSV
OSV
added 2026/07/13 2:36 p.m.11 views

PYSEC-2026-2873 Picklescan (scan_pytorch) Bypass via dynamic eval MAGIC_NUMBER

Summary This is a scanning bypass to scanpytorch function in picklescan. As we can see in the implementation of getmagicnumber that uses pickletools.genopsdata to get the magicnumber with the condition opcode.name includes INT or LONG, but the PyTorch's implemtation simply uses picklemodule.load ...

7.1CVSS6.1AI score0.00434EPSS
SaveExploits0References9
Rows per page
Query Builder