Most recent entries from all https://cve.radiocsirt.org Contains only the most 10 recent entries. http://www.rssboard.org/rss-specification python-feedgen en Sat, 10 Oct 2026 17:42:49 +0000 EUVD-2026-331789 https://cve.radiocsirt.org/vuln/euvd-2026-331789 EUVD-2026-331789 https://cve.radiocsirt.org/vuln/euvd-2026-331789 fkie_cve-2025-71355 https://cve.radiocsirt.org/vuln/fkie_cve-2025-71355 <p>Picklescan before 0.0.25 fails to detect unsafe global functions in the Numpy library, allowing attackers to bypass static analysis and execute arbitrary code during deserialization. Attackers can craft malicious pickle files using numpy.testing._private.utils.runstring within the reduce method to import dangerous libraries like os and execute arbitrary OS commands when the pickle file is loaded.</p> <p>Picklescan before 0.0.25 fails to detect unsafe global functions in the Numpy library, allowing attackers to bypass static analysis and execute arbitrary code during deserialization. Attackers can craft malicious pickle files using numpy.testing._private.utils.runstring within the reduce method to import dangerous libraries like os and execute arbitrary OS commands when the pickle file is loaded.</p> https://cve.radiocsirt.org/vuln/fkie_cve-2025-71355 GHSA-7jm4-f7vj-6pcc https://cve.radiocsirt.org/vuln/ghsa-7jm4-f7vj-6pcc <p>Picklescan before 0.0.25 fails to detect unsafe global functions in the Numpy library, allowing attackers to bypass static analysis and execute arbitrary code during deserialization. Attackers can craft malicious pickle files using numpy.testing._private.utils.runstring within the reduce method to import dangerous libraries like os and execute arbitrary OS commands when the pickle file is loaded.</p> <p>Picklescan before 0.0.25 fails to detect unsafe global functions in the Numpy library, allowing attackers to bypass static analysis and execute arbitrary code during deserialization. Attackers can craft malicious pickle files using numpy.testing._private.utils.runstring within the reduce method to import dangerous libraries like os and execute arbitrary OS commands when the pickle file is loaded.</p> https://cve.radiocsirt.org/vuln/ghsa-7jm4-f7vj-6pcc