Skip to content
OpenAdvisories
High · 8.9 CVE-2026-22612 EUVD-2026-1881GHSA-h4rm-mm56-xf63PYSEC-2026-1370

Fickling vulnerable to detection bypass due to "builtins" blindness

Published Jan 10, 2026 · Updated Jan 12, 2026 · Assigned by GitHub_M

Description

Fickling is a Python pickling decompiler and static analyzer. Prior to version 0.1.7, Fickling is vulnerable to detection bypass due to "builtins" blindness. This issue has been patched in version 0.1.7.

Affected products

VendorProductAffectedFixed
trailofbits fickling < 0.1.7 —

Affected packages

EcosystemPackageAffectedFixedRecord
PyPI fickling < 0.1.7 0.1.7 GHSA-h4rm-mm56-xf63

References