Description
picklescan before 0.0.34 fails to detect the _operator.methodcaller built-in function when scanning pickle files for malicious code. Attackers can craft malicious pickle payloads using _operator.methodcaller that evade detection and execute arbitrary code when loaded by pickle.load().
Affected products
| Vendor | Product | Affected | Fixed |
|---|---|---|---|
| picklescan | picklescan | < 0.0.34 | 0.0.34 |
Affected packages
| Ecosystem | Package | Affected | Fixed | Record |
|---|---|---|---|---|
| PyPI | picklescan | < 0.0.34 | 0.0.34 | GHSA-955r-x9j8-7rhh |
References
- GitHub Security Advisory (GHSA-955r-x9j8-7rhh) vendor-advisory
- VulnCheck Advisory: picklescan - Undetected Remote Code Execution via _operator.methodcaller third-party-advisory