Skip to content
OpenAdvisories

Vendor

picklescan

51 known vulnerabilities.

Products

picklescan 51
All Critical High Medium Low Exploited only Public exploit

2 results · Clear filters · Feed

  • Medium 6.5
    CVE-2026-56304

    picklescan - Arbitrary File Creation via logging.FileHandler Deserialization

    picklescan before 1.0.1 contains an unsafe pickle deserialization vulnerability allowing unauthenticated attackers to create arbitrary zero-byte files via logging.FileHandler class instantiation. Attackers can exploit this by crafting malicious pickle payload…

    picklescan picklescan picklescan PyPI
  • Medium 6.8
    CVE-2025-46417

    Picklescan Vulnerable to Exfiltration via DNS via linecache and ssl.get_server_certificate

    The unsafe globals in Picklescan before 0.0.25 do not include ssl. Consequently, ssl.get_server_certificate can exfiltrate data via DNS after deserialization.

    picklescan picklescan picklescan PyPI