Picklescan vulnerable to Arbitrary File Writing

SummaryPicklescan has got open and shutil in its default dangerous blocklist to prevent arbitrary file overwrites. However the module distutils isnt blocked and can be used for the same purpose ie to write arbitrary files. DetailsThis is another vulnerability which impacts the downstream user.By...