CVE-2026-16760

In Trail of Bits fickling through 0.1.12, the processimport method in fickle.py adds an imported name to the likelysafeimports set whenever the source module is present in sys.stdlibmodulenames and the name is absent from the UNSAFEIMPORTS denylist, without inspecting what the name resolves to or...

CVE-2026-118938

The Trail of Bits fickling library (through version 0.1.12 ) contains a security bypass in its check_safety() function. The root cause is the improper resolution of dotted qualname values in STACK_GLOBAL operands. Specifically, find_class resolves these to arbitrary attribute paths (e.g., Values....

CVE-2026-118938 Fickling check_safety() bypass: dotted __qualname__ in STACK_GLOBAL resolves a class-method attribute path that evades call analysis

In Trail of Bits fickling through 0.1.12, a pickle STACKGLOBAL operand carrying a dotted qualname for example "Values.readfile" is resolved by pickle's findclass through getattribute to an arbitrary attribute path rather than to a module-level function. Fickling records only the leading component...

CVE-2026-16760

The Trail of Bits fickling tool (through version 0.1.12 ) contains a security bypass in the check_safety() function. The _process_import() method in fickle.py incorrectly grants module-level trust to any name from sys.stdlib_module_names not in the UNSAFE_IMPORTS denylist. Because the OvertlyBadE...

CVE-2026-16760 Fickling check_safety() bypass: likely_safe_imports grants module-origin trust to unvalidated standard library callables

In Trail of Bits fickling through 0.1.12, the processimport method in fickle.py adds an imported name to the likelysafeimports set whenever the source module is present in sys.stdlibmodulenames and the name is absent from the UNSAFEIMPORTS denylist, without inspecting what the name resolves to or...

CVE-2026-14534

Trail of Bits fickling versions up to and including 0.1.10 do not include the Python standard library modules posixsubprocess, site, and atexit in the UNSAFEIMPORTS denylist fickle.py. Because these modules are absent from the denylist, fickling's checksafety function returns LIKELYSAFE with zero...

CVE-2026-14534

The CVE-2026-14534 issue affects the Python package fickling, up to version 0.1.10. The root cause is that the UNSAFE_IMPORTS denylist omits three standard library modules — _posixsubprocess, site, and atexit — causing check_safety() to return LIKELY_SAFE and allowing pickle payloads to deseriali...

CVE-2026-14534 Fickling check_safety() bypass via unlisted standard library modules (_posixsubprocess, site, atexit)

Trail of Bits fickling versions up to and including 0.1.10 do not include the Python standard library modules posixsubprocess, site, and atexit in the UNSAFEIMPORTS denylist fickle.py. Because these modules are absent from the denylist, fickling's checksafety function returns LIKELYSAFE with zero...