Most recent entries from all https://cve.radiocsirt.org Contains only the most 10 recent entries. http://www.rssboard.org/rss-specification python-feedgen en Tue, 06 Oct 2026 12:29:20 +0000 CVE-2025-71373 — picklescan - Remote Code Execution via operator.methodcaller Detection Bypass https://cve.radiocsirt.org/vuln/cve-2025-71373 <p><strong>Affected:</strong> picklescan</p> <p>picklescan before 0.0.33 fails to detect operator.methodcaller function calls in pickle files, allowing attackers to bypass security checks. Remote attackers can craft malicious pickle payloads using operator.methodcaller that execute arbitrary code when loaded, compromising systems relying on picklescan for validation.</p> <p><strong>Affected:</strong> picklescan</p> <p>picklescan before 0.0.33 fails to detect operator.methodcaller function calls in pickle files, allowing attackers to bypass security checks. Remote attackers can craft malicious pickle payloads using operator.methodcaller that execute arbitrary code when loaded, compromising systems relying on picklescan for validation.</p> https://cve.radiocsirt.org/vuln/cve-2025-71373