https://cve.radiocsirt.org/rss/recent/all/10 Most recent entries from all 2026-10-08T00:34:34.407008+00:00 Vulnerability-Lookup csirt@opendfir.org python-feedgen Contains only the most 10 recent entries. https://cve.radiocsirt.org/vuln/cve-2025-71372 CVE-2025-71372 — Picklescan - Arbitrary Code Execution via numpy.f2py.crackfortran.getlincoef Gadget 2026-10-08T00:34:34.421934+00:00

Affected: Picklescan

Picklescan before 0.0.33 fails to detect the numpy.f2py.crackfortran.getlincoef gadget in pickle __reduce__ methods, allowing arbitrary code execution. Attackers can craft malicious pickle files that execute arbitrary Python code when loaded, bypassing Picklescan's safety checks and enabling supply-chain poisoning of shared model files.