Critical
CVE-2026-56315
Vulnerability archive
Understand vulnerabilities. Protect your applications.
Discover which vulnerabilities affect your technologies and how to fix them. Explore clear explanations, affected versions and practical recommendations - from CMS platforms and plugins to application libraries.
Vulnerability archive 59
Reset filters
High
CVE-2025-71365
Picklescan is vulnerable to RCE through missing detection when calling numpy.f2py.crackfortran.myeval
High
CVE-2025-71370
Picklescan missing detection when calling pytorch function torch.jit.unsupported_tensor_ops.execWrapper
Medium
CVE-2025-71351
Picklescan missing detection when calling built-in python library function timeit.timeit()
High
CVE-2025-71376
Picklescan has a missing detection when calling built-in python idlelib.autocomplete.AutoComplete.fetch_completions
High
CVE-2025-71341
Picklescan has a missing detection when calling built-in python profile.Profile.runctx
High
CVE-2026-53875
Picklescan (scan_pytorch) Bypass via dynamic eval MAGIC_NUMBER
High
CVE-2026-53874
picklescan missing detection by simple obfuscation of a `builtins.eval` call
High
CVE-2026-22608
Fickling vulnerable to use of ctypes and pydoc gadget chain to bypass detection
High
CVE-2026-53872
picklescan has Arbitrary file read using `io.FileIO`
High
CVE-2025-71321
Picklescan vulnerable to Arbitrary File Writing
High
CVE-2025-71322
Picklescan Bypasses Unsafe Globals Check using pty.spawn
High
CVE-2025-71320
Picklescan has Incomplete List of Disallowed Inputs
Medium
CVE-2025-71339
Picklescan is vulnerable to RCE through missing detection when calling numpy.f2py.crackfortran._eval_length
High
CVE-2025-71323
Picklescan does not block ctypes
High
CVE-2025-71344
Picklescan is missing detection when calling built-in python ensurepip._run_pip
High
CVE-2025-71361
Picklescan has a missing detection when calling built-in python idlelib.calltip.Calltip
High
CVE-2025-71358
Picklescan has a missing detection when calling built-in python idlelib.autocomplete.AutoComplete.get_entity
High
CVE-2025-71354
Picklescan has a missing detection when calling built-in python idlelib.debugobj.ObjectTreeItem
High
CVE-2025-71325
Picklescan has pickle parsing logic flaw that leads to malicious pickle file bypass
Medium
CVE-2025-71378
Picklescan is missing detection when calling built-in Python cProfile.runctx
High
CVE-2025-71357
Picklescan is missing detection when calling built-in python idlelib.pyshell.ModifiedInterpreter.runcommand
High
CVE-2025-71348
Picklescan is missing detection when calling pytorch function torch.utils._config_module.load_config
Medium
CVE-2026-56304
picklescan vulnerable to arbitrary file create using logging.FileHandler
Know which vulnerabilities affect your application
With the DockRay integration and software inventory enabled, DockRay checks reported component versions against known vulnerabilities and notifies you about confirmed matches. Coverage depends on the supported technology and available advisory data.