Lucene search
+L

1 matches found

OSV
OSV
added 2026/06/22 9:4 p.m.16 views

CVE-2025-71339 Picklescan - Arbitrary Code Execution via numpy.f2py.crackfortran._eval_length Gadget

Picklescan before 0.0.33 fails to detect the numpy.f2py.crackfortran.evallength gadget in pickle reduce methods, allowing arbitrary code execution. Attackers can craft malicious pickle files that execute arbitrary Python code when loaded by victims who trust Picklescan's safety validation...

7.6CVSS6.3AI score0.00523EPSS
SaveExploits0References4
Rows per page
Query Builder