Trail of Bits Fickling deserialization injection vulnerability

Versions 0.1.12 and earlier of Trail of Bits Fickling contain a security vulnerability. This vulnerability arises because the processimport method in fickle.py adds the import names of standard library modules to the likelysafeimports set without verifying their actual parsing behavior or usage...