Picklescan
This hub aggregates every CVE we track for Picklescan, a product in the oss libraries space. Use it to gauge the current risk picture and drill into individual advisories.
55
CVEs tracked
12
Critical
41
High
0
In CISA KEV
Severity distribution
HIGH41CRITICAL12MEDIUM2
Monthly trend
0
0
0
0
1
3
1
0
0
0
0
3
0
0
0
0
0
0
0
0
31
16
0
0
2024-102026-09
Latest CVEs
The 15 most recently published vulnerabilities affecting Picklescan.
- CVE-2025-71375picklescan - Undetected Remote Code Execution via _operator.methodcaller8.1
- CVE-2025-71373picklescan - Remote Code Execution via operator.methodcaller Detection Bypass8.1
- CVE-2025-71369picklescan - Unsafe Deserialization via torch.utils.data.datapipes.utils.decoder.basichandlers8.1
- CVE-2025-71372Picklescan - Arbitrary Code Execution via numpy.f2py.crackfortran.getlincoef Gadget8.1
- CVE-2025-71367picklescan - Remote Code Execution via _operator.attrgetter Detection Bypass8.1
- CVE-2025-71366picklescan - Arbitrary Code Execution via torch.utils.bottleneck.__main__.run_cprofile8.1
- CVE-2025-71364picklescan - Arbitrary Code Execution via Undetected asyncio.unix_events._UnixSubprocessTransport._start8.1
- CVE-2025-71362picklescan - Arbitrary Code Execution via Unsafe Deserialization in numpy.f2py.crackfortran8.1
- CVE-2025-71360picklescan - Remote Code Execution via Undetected idlelib.calltip.get_entity8.1
- CVE-2025-71359picklescan - Unsafe Deserialization via lib2to3.pgen2.grammar.Grammar.loads8.1
- CVE-2025-71356picklescan - Arbitrary Code Execution via torch.fx.experimental.symbolic_shapes.ShapeEnv.evaluate_guards_expression8.1
- CVE-2025-71353picklescan - Remote Code Execution via torch._dynamo.guards.GuardBuilder.get8.1
- CVE-2025-71347picklescan - Undetected Remote Code Execution via numpy.f2py.crackfortran.param_eval8.1
- CVE-2025-71345picklescan - Arbitrary Code Execution via torch.utils.bottleneck.__main__.run_autograd_prof8.1
- CVE-2025-71343picklescan - Arbitrary Code Execution via lib2to3.pgen2.pgen.ParserGenerator.make_label Detection Bypass8.1
Product normalization is registry-driven with AI assist and human review. How it works