https://cve.radiocsirt.org/rss/recent/all/10 Most recent entries from all 2026-10-10T21:31:47.155480+00:00 Vulnerability-Lookup csirt@opendfir.org python-feedgen Contains only the most 10 recent entries. https://cve.radiocsirt.org/vuln/euvd-2026-331789 EUVD-2026-331789 2026-10-10T21:31:47.206988+00:00 EUVD-2026-331789 https://cve.radiocsirt.org/vuln/fkie_cve-2025-71355 fkie_cve-2025-71355 2026-10-10T21:31:47.207046+00:00

Picklescan before 0.0.25 fails to detect unsafe global functions in the Numpy library, allowing attackers to bypass static analysis and execute arbitrary code during deserialization. Attackers can craft malicious pickle files using numpy.testing._private.utils.runstring within the reduce method to import dangerous libraries like os and execute arbitrary OS commands when the pickle file is loaded.

 https://cve.radiocsirt.org/vuln/ghsa-7jm4-f7vj-6pcc GHSA-7jm4-f7vj-6pcc 2026-10-10T21:31:47.207117+00:00

Picklescan before 0.0.25 fails to detect unsafe global functions in the Numpy library, allowing attackers to bypass static analysis and execute arbitrary code during deserialization. Attackers can craft malicious pickle files using numpy.testing._private.utils.runstring within the reduce method to import dangerous libraries like os and execute arbitrary OS commands when the pickle file is loaded.