Lucene search
+L

1 matches found

OSV
OSV
added 2026/03/04 9:30 p.m.8 views

GHSA-WCCX-J62J-R448 Fickling has `always_check_safety()` bypass: pickle.loads and _pickle.loads remain unhooked

Assessment The missing pickle entrypoints pickle.loads, pickle.loads, and pickle.load were added to the hook https://github.com/trailofbits/fickling/commit/8c24c6edabceab156cfd41f4d70b650e1cdad1f7. Original report Summary fickling.alwayschecksafety does not hook all pickle entry points...

9.3CVSS6.1AI score
SaveExploits0References4
Rows per page
Query Builder