PYSEC-2025-18

picklescan before 0.0.21 does not treat 'pip' as an unsafe global. An attacker could craft a malicious model that uses Pickle to pull in a malicious PyPI package hosted, for example, on pypi.org or GitHub via pip.main. Because pip is not a restricted global, the model, when scanned with picklesca...

CVE-2025-1716

picklescan before 0.0.21 does not treat 'pip' as an unsafe global. An attacker could craft a malicious model that uses Pickle to pull in a malicious PyPI package hosted, for example, on pypi.org or GitHub via "pip.main". Because pip is not a restricted global, the model, when scanned with...

picklescan 安全漏洞

picklescan is a security scanning program by the individual developer Matthieu Maitre. A security vulnerability exists in versions of picklescan prior to 0.0.21, which stems from not treating pip as an insecure global variable, which could lead to a malicious model introducing a malicious PyPI...

PT-2025-8707

Name of the Vulnerable Software and Affected Versions picklescan versions prior to 0.0.21 Description The issue allows an attacker to craft a malicious model that uses Pickle to pull in a malicious PyPI package via pip.main. This is possible because 'pip' is not treated as an unsafe global, causi...