picklescan Vulnerabilities

pip AI Security

AI Threat Alert tracks 109 known vulnerabilities in picklescan, 12 rated critical — an AI/ML ai security in the pip ecosystem. Each CVE includes CVSS severity, EPSS exploit probability, patch status, and CISO-grade analysis.

Data sources
53
Risk Score
109
Total CVEs
12
Critical
pip
Ecosystem
Jul 4, 2026
Last CVE
53%
Patch Rate
12d
Avg Time to Patch
418 stars 48 forks 3 issues 3 dependents Last push Jul 23, 2026
View on GitHub

Known Vulnerabilities (109 total, page 1 of 5)

Severity CVE ID Summary CVSS Published
HIGH CVE-2025-71375 picklescan: detection bypass enables pickle RCE 8.1 Jul 4, 2026 HIGH CVE-2025-71373 picklescan: methodcaller bypass enables pickle RCE 8.1 Jul 4, 2026 HIGH CVE-2025-71372 Picklescan: RCE gadget bypasses pickle safety scanner 8.1 Jul 4, 2026 HIGH CVE-2025-71369 picklescan misses malicious pickles via torch decoder 8.1 Jul 4, 2026 HIGH CVE-2025-71367 picklescan: attrgetter bypass evades malicious pickle scan 8.1 Jul 4, 2026 HIGH CVE-2025-71366 picklescan: scan bypass lets malicious pickle RCE 8.1 Jul 4, 2026 HIGH CVE-2025-71364 picklescan: scanner blind spot enables pickle RCE 8.1 Jul 4, 2026 HIGH CVE-2025-71362 picklescan: scanner bypass enables RCE via numpy eval 8.1 Jul 4, 2026 HIGH CVE-2025-71360 picklescan: scanner bypass enables pickle RCE 8.1 Jul 4, 2026 HIGH CVE-2025-71359 picklescan: scan bypass lets malicious models RCE 8.1 Jul 4, 2026 HIGH CVE-2025-71356 picklescan: torch.fx gadget bypasses malicious-pickle detection 8.1 Jul 4, 2026 HIGH CVE-2025-71353 picklescan: detection bypass allows pickle RCE 8.1 Jul 4, 2026 HIGH CVE-2025-71347 picklescan: numpy.f2py bypass lets malicious pickle evade scan 8.1 Jul 4, 2026 HIGH CVE-2025-71345 picklescan: scanner blocklist bypass hides pickle RCE 8.1 Jul 4, 2026 HIGH CVE-2025-71343 picklescan: scanner bypass lets malicious pickle files evade detection 8.1 Jul 4, 2026 HIGH CVE-2025-71342 picklescan: idlelib bypass hides pickle RCE 8.1 Jul 4, 2026 HIGH CVE-2025-71374 picklescan: scanner bypass enables pickle RCE 8.1 Jun 30, 2026 HIGH CVE-2025-71371 picklescan: malicious pickle bypasses RCE scan 8.1 Jun 30, 2026 HIGH CVE-2025-71368 picklescan: scan bypass lets malicious pickles hit RCE 8.1 Jun 30, 2026 HIGH CVE-2025-71363 picklescan: scanner bypass enables pickle RCE 8.1 Jun 30, 2026 UNKNOWN CVE-2025-71355 Picklescan: NumPy gadget bypass enables pickle RCE -- Jun 30, 2026 HIGH CVE-2025-71352 picklescan: RCE bypass via trace.Trace.runctx 8.1 Jun 30, 2026 HIGH CVE-2025-71350 picklescan: scanner bypass enables pickle RCE 8.1 Jun 30, 2026 HIGH CVE-2025-71349 picklescan: bypass allows undetected pickle RCE 8.1 Jun 30, 2026 HIGH CVE-2025-71340 picklescan: scanner bypass enables RCE via pickle supply chain 8.1 Jun 25, 2026

Showing 1–25 of 109

Frequently asked questions

What is picklescan?

picklescan is an AI/ML ai security tracked by AI Threat Alert for security vulnerabilities in the pip ecosystem.

How many known vulnerabilities does picklescan have?

picklescan has 109 known CVEs, 12 of them critical, tracked from NVD and GitHub Advisory.

Which ecosystem is picklescan distributed in?

picklescan is distributed via the pip ecosystem and categorized as ai security.

Where does the picklescan vulnerability data come from?

Vulnerability data is sourced from NVD and GitHub Advisory, enriched with CVSS, EPSS, exploit signals, and patch status for each CVE.

How do I assess the risk of picklescan?

Review each CVE below — every entry shows CVSS severity, EPSS exploit probability, exploitation signals, and whether a patched version is available.

Monitor picklescan in your stack

Get instant alerts when new vulnerabilities affect picklescan. CISO analysis, ATLAS technique mappings, and compliance reports included.

Start Monitoring