Lucene search
+L

1 matches found

PyPA
PyPA
•added 2026/07/07 4:03 p.m.•28 views

Fickling vulnerable to detection bypass due to "builtins" blindness

Fickling's assessmentFickling started emitting AST nodes for builtins imports in order to match them during analysis https://github.com/trailofbits/fickling/commit/9f309ab834797f280cb5143a2f6f987579fa7cdf. Original report SummaryFickling works byPickle bytecode -- AST -- Security analysisHowever...

9.3CVSS6.2AI score0.00313EPSS
SaveExploits0References9Affected Software1
Rows per page
Query Builder