https://cve.radiocsirt.org/rss/recent/all/10 Most recent entries from all 2026-10-08T19:06:37.600815+00:00 Vulnerability-Lookup csirt@opendfir.org python-feedgen Contains only the most 10 recent entries. https://cve.radiocsirt.org/vuln/cve-2025-67748 CVE-2025-67748 — Fickling has Code Injection vulnerability via pty.spawn() 2026-10-08T19:06:37.617603+00:00

Affected: trailofbits fickling

Fickling is a Python pickling decompiler and static analyzer. Versions prior to 0.1.6 had a bypass caused by `pty` missing from the block list of unsafe module imports. This led to unsafe pickles based on `pty.spawn()` being incorrectly flagged as `LIKELY_SAFE`, and was fixed in version 0.1.6. This impacted any user or system that used Fickling to vet pickle files for security issues.