Lucene search
+L

1 matches found

Github Security Blog
Github Security Blog
added 2025/09/10 7:50 p.m.11 views

Picklescan: ZIP archive scan bypass is possible through non-exhaustive Cyclic Redundancy Check

Summary Picklescan's ability to scan ZIP archives for malicious pickle files is compromised when the archive contains a file with a bad Cyclic Redundancy Check CRC. Instead of attempting to scan the files within the archive, whatever the CRC is, Picklescan fails in error and returns no results...

9.8CVSS7.1AI score0.01428EPSS
SaveExploits1References8Affected Software1
Rows per page
Query Builder