Picklescan missing detection when calling built-in python library function timeit.timeit()

SummaryUsing timeit.timeit function, which is a built-in python library function to execute remote pickle file. DetailsPickle’s deserialization process is known to allow execution of function via reduce method. While Picklescan is meant to detect such exploits, this attack evades detection by...