Description
Picklescan before 0.0.33 fails to detect the numpy.f2py.crackfortran.getlincoef gadget in pickle __reduce__ methods, allowing arbitrary code execution. Attackers can craft malicious pickle files that execute arbitrary Python code when loaded, bypassing Picklescan's safety checks and enabling supply-chain poisoning of shared model files.
Affected products
| Vendor | Product | Affected | Fixed |
|---|---|---|---|
| Picklescan | Picklescan | < 0.0.33 | 0.0.33 |
Affected packages
| Ecosystem | Package | Affected | Fixed | Record |
|---|---|---|---|---|
| PyPI | picklescan | < 0.0.33 | 0.0.33 | GHSA-rrxm-2pvv-m66x |
References
- GitHub Security Advisory (GHSA-rrxm-2pvv-m66x) vendor-advisory
- VulnCheck Advisory: Picklescan - Arbitrary Code Execution via numpy.f2py.crackfortran.getlincoef Gadget third-party-advisory