38 matches found
Pylint: Arbitrary code execution via pickle deserialization of the stats cache in PYLINT_HOME
Impact Since 2006 / pylint 0.15.2, pylint caches its stats as pickles in PYLINTHOME and reload them on the next run with pickle.load. Someone without access to the configuration or linted code, but with access to the cache directory predictable PYLINTHOME on a multi-user host can write a crafted...
5.4CVSS6.2AI score0.00115EPSS
SaveExploits0References6Affected Software1
20