CVE-2025-1889

picklescan before 0.0.22 only considers standard pickle file extensions in the scope for its vulnerability scan. An attacker could craft a malicious model that uses Pickle and include a malicious pickle file with a non-standard file extension. Because the malicious pickle file inclusion is not...

CVE-2025-1889

creationtimestamp| type| source ---|---|--- 2025-03-03 19:59:46+00:00| published-proof-of-concept| https://github.com/advisories/GHSA-769v-p64c-89pr 2025-03-03 20:49:29+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3ljit7b7tem2b 2025-03-03 21:24:39+00:00| seen|...

CVE-2025-1889

picklescan before 0.0.22 only considers standard pickle file extensions in the scope for its vulnerability scan. An attacker could craft a malicious model that uses Pickle and include a malicious pickle file with a non-standard file extension. Because the malicious pickle file inclusion is not...

CVE-2025-1889 picklescan - Security scanning bypass via non-standard file extensions

picklescan before 0.0.22 only considers standard pickle file extensions in the scope for its vulnerability scan. An attacker could craft a malicious model that uses Pickle and include a malicious pickle file with a non-standard file extension. Because the malicious pickle file inclusion is not...