CVE-2026-114608

A flaw was found in Pylint. The application stores module statistics in predictable cache files and deserializes them without adequate validation. A local attacker with write access to a shared or untrusted cache directory can replace these files with malicious data. When Pylint is subsequently...

CVE-2026-114608

Pylint is a static code analyser for Python. From 0.15.2 until 4.0.9, Pylint stores module statistics in predictable files under PYLINTHOME and loads those files with pickle.load on a later run. An attacker who can write to a shared, group-writable, or otherwise untrusted cache directory can...

EUVD-2026-108257

Pylint is a static code analyser for Python. From 0.15.2 until 4.0.9, Pylint stores module statistics in predictable files under PYLINTHOME and loads those files with pickle.load on a later run. An attacker who can write to a shared, group-writable, or otherwise untrusted cache directory can...

CVE-2026-114608

The static code analyser Pylint is vulnerable to arbitrary code execution in versions 0.15.2 through 4.0.9 . The root cause is the insecure use of pickle.load to process module statistics stored in predictable files under PYLINT_HOME . An attacker with write access to a shared, group-writable, or...

CVE-2026-114608 Pylint: Arbitrary code execution via pickle deserialization of the stats cache in PYLINT_HOME

Pylint is a static code analyser for Python. From 0.15.2 until 4.0.9, Pylint stores module statistics in predictable files under PYLINTHOME and loads those files with pickle.load on a later run. An attacker who can write to a shared, group-writable, or otherwise untrusted cache directory can...

Quality and Security Signals in AI-Generated Python Refactoring Pull Requests

As AI agents increasingly contribute to code development and maintenance, there is still limited empirical evidence on the quality and risk characteristics of their changes in real-world projects, particularly for refactoring-oriented contributions. It remains unclear how agent-authored refactori...

Malicious code in oca-pylint-plugin (PyPI)

--- -= Per source details. Do not edit below this line.=-...

MAL-2025-6559 Malicious code in oca-pylint-plugin (PyPI)

--- -= Per source details. Do not edit below this line.=-...

MAL-2025-958 Malicious code in pylint-redis (PyPI)

--- -= Per source details. Do not edit below this line.=-...

Malicious code in pylint-redis (PyPI)

--- -= Per source details. Do not edit below this line.=-...

MAL-2023-1394 Malicious code in pylint-py (PyPI)

--- -= Per source details. Do not edit below this line.=- Source: ossf-package-analysis 3445cee4e2fd4e4e0170f04b51b2a3409af7c1b2478609a38bcc46d5094e134d The OpenSSF Package Analysis project identified 'pylint-py' @ 15.0.3 pypi as malicious. It is considered malicious because: - The package...

Malicious code in pylint-py (PyPI)

--- -= Per source details. Do not edit below this line.=- Source: ossf-package-analysis 3445cee4e2fd4e4e0170f04b51b2a3409af7c1b2478609a38bcc46d5094e134d The OpenSSF Package Analysis project identified 'pylint-py' @ 15.0.3 pypi as malicious. It is considered malicious because: - The package...

Malicious code in pylint-beautifulsoup (PyPI)

--- -= Per source details. Do not edit below this line.=- Source: ossf-package-analysis c3646b7e949a863983491259c105cde8b1ff0229781276a5ea22360c75440c5e The OpenSSF Package Analysis project identified 'pylint-beautifulsoup' @ 3.12.3 pypi as malicious. It is considered malicious because: - The...

Malicious code in pylint-sys (PyPI)

--- -= Per source details. Do not edit below this line.=- Source: ossf-package-analysis b069b475056c2219d8f5f62b9e0479ba4dfb9a18639f9afd674c9ef90359882d The OpenSSF Package Analysis project identified 'pylint-sys' @ 8.15.6 pypi as malicious. It is considered malicious because: - The package...

MAL-2023-1395 Malicious code in pylint-sys (PyPI)

--- -= Per source details. Do not edit below this line.=- Source: ossf-package-analysis b069b475056c2219d8f5f62b9e0479ba4dfb9a18639f9afd674c9ef90359882d The OpenSSF Package Analysis project identified 'pylint-sys' @ 8.15.6 pypi as malicious. It is considered malicious because: - The package...

Regular Expression Denial Of Service (ReDoS)

pylint is vulnerable to regular expression denial of service. A regex sub-pattern ^\W+\w allows an attacker to cause a denial of service condition using the string ""+"1"5000 + "!"...

Fedora Update for pylint FEDORA-2014-3300

Check for the Version of pylint OpenVAS Vulnerability Test Fedora Update for pylint FEDORA-2014-3300 Authors: System Generated Check Copyright: Copyright C 2014 Greenbone Networks GmbH, http://www.greenbone.net This program is free software; you can redistribute it and/or modify it under the term...

Fedora Update for pylint FEDORA-2014-3300

The remote host is missing an update for the SPDX-FileCopyrightText: 2014 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

[SECURITY] Fedora 20 Update: pylint-1.1.0-1.fc20

Pylint is a python tool that checks if a module satisfy a coding standard. Pylint can be seen as another PyChecker since nearly all tests you can do with PyChecker can also be done with Pylint. But Pylint offers some more features, like checking line-code's length, checking if variable names are...