Lucene search
+L

1 matches found

Github Security Blog
Github Security Blog
added 2026/03/13 8:58 p.m.21 views

fickling's `platform` module subprocess invocation evades `check_safety()` with `LIKELY_SAFE`

Our assessment We added platform to the blocklist of unsafe modules https://github.com/trailofbits/fickling/commit/351ed4d4242b447c0ffd550bb66b40695f3f9975. It was not possible to inject extra arguments to file without first monkey-patching platform.followsymlinks with the pickle, as it always...

6AI score
SaveExploits0References4Affected Software1
Rows per page
Query Builder