Description
picklescan before 0.0.34 fails to detect _operator.attrgetter function calls in pickle payloads, allowing attackers to bypass security checks. Remote attackers can craft malicious pickle files using _operator.attrgetter in reduce methods to execute arbitrary code when pickle.load() processes the file.
Affected products
| Vendor | Product | Affected | Fixed |
|---|---|---|---|
| picklescan | picklescan | < 0.0.34 | 0.0.34 |
Affected packages
| Ecosystem | Package | Affected | Fixed | Record |
|---|---|---|---|---|
| PyPI | picklescan | < 0.0.34 | 0.0.34 | GHSA-46h3-79wf-xr6c |
References
- GitHub Security Advisory (GHSA-46h3-79wf-xr6c) vendor-advisory
- VulnCheck Advisory: picklescan - Remote Code Execution via _operator.attrgetter Detection Bypass third-party-advisory