Description
picklescan before 0.0.30 (affected versions 0.0.26 and earlier) fails to detect the ensurepip._run_pip built-in function when scanning pickle files, allowing attackers to execute arbitrary code. Malicious pickle files embedding ensurepip._run_pip calls in __reduce__ methods bypass picklescan detection and achieve remote code execution upon pickle.load() invocation.
Affected products
| Vendor | Product | Affected | Fixed |
|---|---|---|---|
| picklescan | picklescan | < 0.0.30 | 0.0.30 |
Affected packages
| Ecosystem | Package | Affected | Fixed | Record |
|---|---|---|---|---|
| PyPI | picklescan | < 0.0.30 | 0.0.30 | GHSA-xp4f-hrf8-rxw7 |
References
- GitHub Security Advisory (GHSA-xp4f-hrf8-rxw7) vendor-advisory
- VulnCheck Advisory: picklescan - Arbitrary Code Execution via Undetected ensurepip._run_pip Function third-party-advisory