These pages are published after PatchSiren validates generated defensive summaries against stored public CVE and source evidence.
CVE-2025-71373 is a high-severity vulnerability in picklescan that allows attackers to bypass security checks and execute arbitrary code via malicious pickle files. The issue arises from picklescan's failure to detect operator.methodcaller function calls in pickle files before version 0.0.33. Remote attackers can craft malicious pickle payloads using operator.methodcaller that execute arbitrary code when [truncated]
CVE-2025-71372 is a high-severity vulnerability in Picklescan before version 0.0.33. The vulnerability allows attackers to craft malicious pickle files that can execute arbitrary Python code when loaded, bypassing Picklescan's safety checks. This can enable supply-chain poisoning of shared model files. The vulnerability has a CVSS score of 7.6 and is considered high severity. The CVE was published on July 4, 2026.
CVE-2025-71369 is a high-severity vulnerability in the picklescan library, which failed to detect malicious pickle files using torch.utils.data.datapipes.utils.decoder.basichandlers in reduce methods. This oversight enables remote attackers to embed undetected malicious code in pickle files, leading to remote code execution during deserialization. The vulnerability has a CVSS score of 7.6 and is considere [truncated]
CVE-2025-71367 is a high-severity vulnerability in picklescan before version 0.0.34. The issue allows remote attackers to craft malicious pickle files using _operator.attrgetter in reduce methods, which can execute arbitrary code when processed by pickle.load(). This vulnerability has a CVSS score of 7.6 and is considered HIGH severity. The CVE was published on 2026-07-04T02:16:22.833Z and has not been mo [truncated]
CVE-2025-71364 is a high-severity vulnerability in picklescan, a Python library for detecting and preventing arbitrary code execution via pickle files. The vulnerability occurs because picklescan before version 0.0.30 fails to detect the asyncio.unix_events._UnixSubprocessTransport._start function in pickle reduce methods. This allows remote attackers to craft malicious pickle files that embed this built- [truncated]
CVE-2025-71360 is a high-severity vulnerability in the picklescan library before version 0.0.29. The vulnerability allows attackers to embed undetected code in pickle files that executes remote commands when loaded by victims. This is due to the library's failure to detect malicious pickle files using the idlelib.calltip.get_entity function in reduce methods. The vulnerability has a CVSS score of 7.6 and [truncated]
CVE-2025-71359 is a high-severity vulnerability in picklescan before version 0.0.29. The vulnerability allows remote code execution due to the failure of picklescan to detect malicious pickle payloads that utilize lib2to3.pgen2.grammar.Grammar.loads in the reduce method. Attackers can craft pickle files embedding dangerous code that evades picklescan detection and executes during pickle.load() deserializa [truncated]
CVE-2025-71356 is a high-severity vulnerability in picklescan, a library used for detecting malicious pickle files. The vulnerability, with a CVSS score of 7.6, allows attackers to embed undetected code in pickle files that executes remote code when loaded by victims. This issue was reported by Vulncheck and is tracked under the identifier CVE-2025-71356. The vulnerability affects picklescan versions befo [truncated]
CVE-2025-71353 is a high-severity vulnerability in picklescan before version 0.0.28. The vulnerability allows attackers to craft malicious pickle files that evade detection by picklescan and execute arbitrary commands when loaded. The vulnerability is caused by picklescan's failure to detect malicious pickle files that exploit the torch._dynamo.guards.GuardBuilder.get function in reduce methods. This vuln [truncated]
CVE-2025-71347 is a high-severity vulnerability in picklescan before version 0.0.33. The vulnerability allows remote attackers to embed undetected code in pickle files that executes during deserialization, enabling arbitrary code execution in applications loading untrusted pickle data. This issue arises from the failure of picklescan to detect malicious pickle files using the numpy.f2py.crackfortran.param [truncated]
CVE-2025-71345 is a high-severity vulnerability in picklescan before version 0.0.30. The vulnerability allows attackers to embed undetected code in pickle files that executes during deserialization, enabling remote code execution. The Common Vulnerability Scoring System (CVSS) score for this vulnerability is 7.6, indicating a high level of severity. The vulnerability was published on July 4, 2026, and has [truncated]
CVE-2025-71343 is a HIGH severity vulnerability in picklescan before 0.0.30. The vulnerability allows attackers to craft malicious pickle files with embedded code that evades detection but executes arbitrary commands when pickle.load() is called. This is due to a failure in detecting malicious pickle files that exploit the lib2to3.pgen2.pgen.ParserGenerator.make_label function in the reduce method. The vu [truncated]
CVE-2025-71342 is a high-severity vulnerability in picklescan that allows remote code execution via malicious pickle files. The vulnerability exists due to the library's failure to detect malicious pickle files using idlelib.run.Executive.runcode in reduce methods. Attackers can embed undetected code in pickle files that executes during pickle.load, enabling remote code execution in PyTorch models and sup [truncated]
The CVE-2026-56315 vulnerability in picklescan before version 1.0.4 allows for remote code execution. This is due to the failure of picklescan to block at least seven Python standard library modules, including uuid, _osx_support, _aix_support, _pyrepl.pager, and imaplib, which expose eight functions. These functions can be exploited by crafting malicious pickle files that import these unblocked modules, t [truncated]
CVE-2025-71376 is a high-severity vulnerability in the picklescan library before version 0.0.29. The vulnerability allows attackers to embed undetected code in pickle files that executes arbitrary commands when loaded by victims. This is due to the library's failure to detect malicious pickle files using idlelib.autocomplete.AutoComplete.fetch_completions in reduce methods. The vulnerability has a CVSS sc [truncated]
CVE-2025-71365 is a high-severity vulnerability in picklescan that allows attackers to bypass detection of malicious pickle files, leading to arbitrary code execution. The vulnerability exists in picklescan versions before 0.0.33 and is caused by the library's failure to detect malicious pickle files that invoke the numpy.f2py.crackfortran.myeval function through the reduce method. Attackers can craft mal [truncated]
CVE-2025-71341 is a high-severity vulnerability in the picklescan library before version 0.0.29. The library fails to detect the profile.Profile.runctx function when analyzing pickle files, allowing attackers to embed undetected malicious code. Remote attackers can craft malicious pickle files using profile.Profile.runctx in the reduce method to achieve remote code execution when the pickle file is loaded [truncated]
CVE-2025-71358 is a high-severity vulnerability in the picklescan library before version 0.0.29. The library fails to detect malicious pickle files that exploit the idlelib.autocomplete.AutoComplete.get_entity function in reduce methods. This allows attackers to embed undetected code in pickle files that executes arbitrary commands when loaded by victims using pickle.load(). The vulnerability has a CVSS s [truncated]
CVE-2025-71344 is a high-severity vulnerability in picklescan, a tool used for scanning pickle files. The vulnerability affects versions 0.0.26 and earlier, and was addressed in version 0.0.30. An attacker can exploit this vulnerability by crafting a malicious pickle file that embeds an ensurepip._run_pip call in its __reduce__ method. When this pickle file is loaded using pickle.load(), the embedded ensu [truncated]
CVE-2025-71378 is a HIGH-severity vulnerability in picklescan, a tool designed to scan pickle files for potential security issues. The vulnerability, scored 7.6, allows attackers to execute arbitrary code by bypassing picklescan's detection of cProfile.runctx function calls in pickle file reduce methods. When loaded via pickle.load(), malicious pickle files can execute remote code. This issue affects pick [truncated]
CVE-2025-71357 is a high-severity vulnerability in picklescan before version 0.0.30. The issue allows attackers to embed undetected code in pickle files that executes remote commands when loaded by victims. The vulnerability has a CVSS score of 7.6 and is classified as HIGH. The CVE was published on June 21, 2026, and has not been modified since. The affected product and vendor are not clearly identified, [truncated]
CVE-2025-71348 is a high-severity vulnerability (CVSS Score: 7.6) affecting picklescan versions before 0.0.28. The issue allows attackers to craft malicious pickle files that can execute arbitrary code during the deserialization process, potentially leading to remote code execution (RCE) in supply chain attacks. The vulnerability is caused by picklescan's failure to detect malicious pickle files that invo [truncated]
CVE-2026-56304 is a medium-severity vulnerability in picklescan before 1.0.1. The issue allows unauthenticated attackers to create arbitrary zero-byte files via the logging.FileHandler class instantiation. This can be exploited by crafting malicious pickle payloads to bypass RCE blocklists and create lock files or other filesystem artifacts, potentially causing denial of service or application disruption. [truncated]
CVE-2026-53875 is a HIGH-severity vulnerability in picklescan before 1.0.3. The scan_pytorch function contains a scanning bypass vulnerability that allows attackers to embed malicious magic numbers via dynamic eval using the __reduce__ trick. This enables attackers to craft malicious PyTorch payloads that evade picklescan detection while remaining executable, potentially leading to arbitrary code executio [truncated]
CVE-2026-53874 is a critical vulnerability in picklescan before 1.0.1, allowing unauthenticated users to execute arbitrary code by hiding eval calls nested under callable objects via getattr. Attackers can embed malicious code in pickle files that evades detection but executes when the pickle is loaded from untrusted sources. This vulnerability has a CVSS score of 9.3 and is classified as CRITICAL. Affect [truncated]
CVE-2026-53873 is a critical vulnerability in the picklescan library before version 1.0.4. The issue lies in the incomplete blocklist for the profile module, which fails to block the module-level profile.run() function. This allows attackers to craft malicious pickle files that call profile.run(statement) to execute arbitrary Python code, while picklescan reports zero security issues. The vulnerability ha [truncated]
CVE-2026-53872 is a HIGH-severity vulnerability in picklescan, a software that was vulnerable to unsafe pickle deserialization. This vulnerability, with a CVSS score of 8.7, allowed unauthenticated attackers to read arbitrary server files by chaining io.FileIO and urllib.request.urlopen. Attackers could bypass RCE-focused blocklists to exfiltrate sensitive data like /etc/passwd to external servers. The vu [truncated]
CVE-2026-3490 is a critical vulnerability in the picklescan library, which fails to block the `pkgutil.resolve_name` function. This oversight enables attackers to bypass the entire blocklist by resolving any dangerous function through indirect REDUCE calls, potentially leading to remote code execution. The vulnerability has a CVSS score of 10, indicating the highest severity. Remote attackers can exploit [truncated]
CVE-2025-71325 picklescan before 0.0.27 contains a parsing logic error in the _list_globals function when handling STACK_GLOBAL opcodes, failing to track arguments in the correct range and allowing malicious pickle files to bypass detection. Attackers can craft pickle files with arguments at position zero to trigger unexpected exceptions and evade security scanning. This vulnerability has a CVSS score of [truncated]
CVE-2025-71323 is a critical vulnerability in picklescan before version 0.0.33, allowing remote code execution by invoking direct syscalls and accessing raw memory. Attackers craft malicious pickle files using ctypes.WinDLL to load kernel32.dll and execute arbitrary commands, bypassing sandbox protections and gadget chain detection. This vulnerability has a CVSS score of 9.3 and is considered critical. Us [truncated]
CVE-2025-71322 is a HIGH severity vulnerability in PickleScan before 0.0.33. The vulnerability allows attackers to bypass security checks and achieve arbitrary code execution when files are processed by PickleScan. Malicious actors can craft pickle payloads using the pty.spawn function to exploit this vulnerability. The vulnerability has a CVSS score of 8.7 and was published on June 17, 2026. The vendor, [truncated]
CVE-2025-71321 is a critical vulnerability in picklescan before version 0.0.33. The vulnerability allows attackers to bypass the dangerous blocklist by using distutils.file_util.write_file, enabling them to construct malicious pickle objects and overwrite critical system files. This can lead to denial of service or remote code execution. The vulnerability has a CVSS score of 9.3 and is considered critical [truncated]