https://cve.radiocsirt.org/rss/recent/all/10 Most recent entries from all 2026-10-07T08:14:46.132205+00:00 Vulnerability-Lookup csirt@opendfir.org python-feedgen Contains only the most 10 recent entries. https://cve.radiocsirt.org/vuln/cve-2025-71344 CVE-2025-71344 — picklescan - Arbitrary Code Execution via Undetected ensurepip._run_pip Function 2026-10-07T08:14:46.149855+00:00

Affected: picklescan

picklescan before 0.0.30 (affected versions 0.0.26 and earlier) fails to detect the ensurepip._run_pip built-in function when scanning pickle files, allowing attackers to execute arbitrary code. Malicious pickle files embedding ensurepip._run_pip calls in __reduce__ methods bypass picklescan detection and achieve remote code execution upon pickle.load() invocation.