Description
Picklescan before 0.0.33 fails to detect the numpy.f2py.crackfortran._eval_length gadget in pickle __reduce__ methods, allowing arbitrary code execution. Attackers can craft malicious pickle files that execute arbitrary Python code when loaded by victims who trust Picklescan's safety validation.
Affected products
| Vendor | Product | Affected | Fixed |
|---|---|---|---|
| Picklescan | Picklescan | < 0.0.33 | 0.0.33 |
Affected packages
| Ecosystem | Package | Affected | Fixed | Record |
|---|---|---|---|---|
| PyPI | picklescan | < 0.0.33 | 0.0.33 | GHSA-6556-fwc2-fg2p |
References
- GitHub Security Advisory (GHSA-6556-fwc2-fg2p) vendor-advisory
- VulnCheck Advisory: Picklescan - Arbitrary Code Execution via numpy.f2py.crackfortran._eval_length Gadget third-party-advisory