https://cve.radiocsirt.org/rss/recent/all/10 Most recent entries from all 2026-10-06T01:03:39.386993+00:00 Vulnerability-Lookup csirt@opendfir.org python-feedgen Contains only the most 10 recent entries. https://cve.radiocsirt.org/vuln/cve-2025-71367 CVE-2025-71367 — picklescan - Remote Code Execution via _operator.attrgetter Detection Bypass 2026-10-06T01:03:39.403377+00:00

Affected: picklescan

picklescan before 0.0.34 fails to detect _operator.attrgetter function calls in pickle payloads, allowing attackers to bypass security checks. Remote attackers can craft malicious pickle files using _operator.attrgetter in reduce methods to execute arbitrary code when pickle.load() processes the file.