Skip to content
OpenAdvisories

Vendor

pylint-dev

1 known vulnerabilities.

Products

1 result · Clear filters · Feed

  • Medium 5.4

    Pylint: Arbitrary code execution via pickle deserialization of the stats cache in PYLINT_HOME

    Pylint is a static code analyser for Python. From 0.15.2 until 4.0.9, Pylint stores module statistics in predictable files under PYLINT_HOME and loads those files with pickle.load on a later run. An attacker who can write to a shared, group-writable, or other…