Lucene search
+L

1 matches found

osv_cve
osv_cve
•added 2026/06/22 9:04 p.m.•31 views

CVE-2025-71339 Picklescan - Arbitrary Code Execution via numpy.f2py.crackfortran._eval_length Gadget

Picklescan before 0.0.33 fails to detect the numpy.f2py.crackfortran.evallength gadget in pickle reduce methods, allowing arbitrary code execution. Attackers can craft malicious pickle files that execute arbitrary Python code when loaded by victims who trust Picklescan's safety validation...

7.6CVSS6.9AI score0.00381EPSS
SaveExploits0References4
Rows per page
Query Builder