fickling

Fickling Fickling ist ein Dekompilierer, statischer Analysator und Bytecode-Umschreiber für Python-Pickle-Objektserialisierungen. Sie können Fickling verwenden, um bösartige Pickle- oder Pickle-basierte Dateien, einschließlich PyTorch-Dateien, zu erkennen, zu analysieren, reverse zu engineering...

Beyond F1: Evaluating Coverage and Failure Recovery in AI Model Security Scanners

Static scanners are increasingly used to identify executable or otherwise unsafe content in machine- learning artifacts, yet conventional evaluation metrics characterize only cases where a scanner yields a usable security judgment. We evaluate ModelScan, ModelAudit, and Fickling using a controlle...

Fickling vulnerable to detection bypass due to "builtins" blindness

Fickling's assessmentFickling started emitting AST nodes for builtins imports in order to match them during analysis https://github.com/trailofbits/fickling/commit/9f309ab834797f280cb5143a2f6f987579fa7cdf. Original report SummaryFickling works byPickle bytecode -- AST -- Security analysisHowever...

Fickling has Static Analysis Bypass via Incomplete Dangerous Module Blocklist

Fickling's assessmentctypes, importlib, runpy, code and multiprocessing were added the list of unsafe imports https://github.com/trailofbits/fickling/commit/9a2b3f89bd0598b528d62c10a64c1986fcb09f66, https://github.com/trailofbits/fickling/commit/eb299b453342f1931c787bcb3bc33f3a03a173f9,...

PYSEC-2026-1371 Fickling Blocklist Bypass: cProfile.run()

Fickling's assessment cProfile was added to the list of unsafe imports https://github.com/trailofbits/fickling/commit/dc8ae12966edee27a78fe05c5745171a2b138d43. Original report Description Summary Fickling versions up to and including 0.1.6 do not treat Python's cProfile module as unsafe. Because ...

chutes (>=0.0.8, <=0.4.3rc2), modelaudit (>=0.2.6, <=0.2.24) potentially affected by CVE-2026-22606 via fickling (>=0.1.3, <=0.1.6)

fickling PYPI version =0.1.3, =0.0.8, =0.2.6, =0.2.24 Source cves: CVE-2026-22606 Source advisory: OSV:PYSEC-2026-1373...

chutes (>=0.0.8, <=0.4.3rc2), modelaudit (>=0.2.6, <=0.2.24) potentially affected by CVE-2026-22609 via fickling (>=0.1.3, <=0.1.6)

fickling PYPI version =0.1.3, =0.0.8, =0.2.6, =0.2.24 Source cves: CVE-2026-22609 Source advisory: OSV:PYSEC-2026-1372...

chutes (>=0.0.8, <=0.4.3rc2), modelaudit (>=0.2.6, <=0.2.24) potentially affected by CVE-2026-22612 via fickling (>=0.1.3, <=0.1.6)

fickling PYPI version =0.1.3, =0.0.8, =0.2.6, =0.2.24 Source cves: CVE-2026-22612 Source advisory: OSV:PYSEC-2026-1370...

chutes (>=0.0.8, <=0.4.3rc2), modelaudit (>=0.2.6, <=0.2.24) potentially affected by CVE-2026-22608 via fickling (>=0.1.3, <=0.1.6)

fickling PYPI version =0.1.3, =0.0.8, =0.2.6, =0.2.24 Source cves: CVE-2026-22608 Source advisory: OSV:PYSEC-2026-1369...

Fickling Blocklist Bypass: cProfile.run()

Fickling's assessmentcProfile was added to the list of unsafe imports https://github.com/trailofbits/fickling/commit/dc8ae12966edee27a78fe05c5745171a2b138d43. Original report Description SummaryFickling versions up to and including 0.1.6 do not treat Python's cProfile module as unsafe. Because of...

chutes (>=0.0.8, <=0.4.3rc2), modelaudit (>=0.2.6, <=0.2.24) potentially affected by CVE-2026-22607 via fickling (>=0.1.3, <=0.1.6)

fickling PYPI version =0.1.3, =0.0.8, =0.2.6, =0.2.24 Source cves: CVE-2026-22607 Source advisory: OSV:PYSEC-2026-1371...

Fickling has a bypass via runpy.run_path() and runpy.run_module()

Fickling's assessmentrunpy was added to the list of unsafe imports https://github.com/trailofbits/fickling/commit/9a2b3f89bd0598b528d62c10a64c1986fcb09f66. Original report SummaryFickling versions up to and including 0.1.6 do not treat Python’s runpy module as unsafe. Because of this, a malicious...

PYSEC-2026-1369 Fickling vulnerable to use of ctypes and pydoc gadget chain to bypass detection

Fickling's assessment pydoc and ctypes were added to the list of unsafe imports https://github.com/trailofbits/fickling/commit/b793563e60a5e039c5837b09d7f4f6b92e6040d1. Original report Summary Both ctypes and pydoc modules arent explictly blocked. Even other existing pickle scanning tools like...

chutes (>=0.0.8, <=0.4.3rc2), modelaudit (>=0.2.6, <=0.2.23) potentially affected by CVE-2025-67747 via fickling (>=0.1.3, <=0.1.4)

fickling PYPI version =0.1.3, =0.0.8, =0.2.6, =0.2.23 Source cves: CVE-2025-67747 Source advisory: OSV:PYSEC-2026-1368...

PYSEC-2026-1368 Fickling has missing detection for marshal.loads and types.FunctionType in unsafe modules list

Fickling Assessment Based on the test case provided in the original report below, this bypass was caused by marshal and types missing from the block list of unsafe module imports, Fickling started blocking both modules to address this issue. This was fixed in...

Fickling has missing detection for marshal.loads and types.FunctionType in unsafe modules list

Fickling AssessmentBased on the test case provided in the original report below, this bypass was caused by marshal and types missing from the block list of unsafe module imports, Fickling started blocking both modules to address this issue. This was fixed in...

CVE-2026-14535

A flaw was found in the fickling library, versions up to and including 0.1.11. A logic error in the security analysis passes allows an attacker to bypass intended safety checks during pickle deserialization. This vulnerability enables the invocation of arbitrary standard library modules, leading ...

CVE-2026-14534

A flaw was found in the fickling library, which is designed to safely handle Python pickle data. The library's security checks in versions up to and including 0.1.10 fail to properly identify and block certain dangerous Python standard library modules during deserialization. This oversight allows...

Protection Mechanism Failure

Overview fickling is an A static analyzer and interpreter for Python pickle data Affected versions of this package are vulnerable to Protection Mechanism Failure due to shared mutable state in the shortencode function. An attacker can execute arbitrary code by providing a malicious pickle payload...

chutes (>=0.0.8, <=0.4.3rc2), modelaudit (>=0.2.6, <=0.2.24) potentially affected by CVE-2026-14535 via fickling (>=0.1.3, <=0.1.6)

fickling PYPI version =0.1.3, =0.0.8, =0.2.6, =0.2.24 Source cves: CVE-2026-14535 Source advisory: SNYK:PYTHON-FICKLING-17816995...