picklescan Vulnerabilities

pip AI Security

AI Threat Alert tracks 109 known vulnerabilities in picklescan, 12 rated critical — an AI/ML ai security in the pip ecosystem. Each CVE includes CVSS severity, EPSS exploit probability, patch status, and CISO-grade analysis.

Data sources
53
Risk Score
109
Total CVEs
12
Critical
pip
Ecosystem
Jul 4, 2026
Last CVE
53%
Patch Rate
12d
Avg Time to Patch
418 stars 48 forks 3 issues 3 dependents Last push Jul 23, 2026
View on GitHub

Known Vulnerabilities (109 total, page 2 of 5)

Severity CVE ID Summary CVSS Published
HIGH CVE-2025-71361 picklescan: scanner bypass allows RCE via pickle load 8.1 Jun 24, 2026 HIGH CVE-2025-71354 picklescan: scanner bypass enables arbitrary code execution 8.1 Jun 24, 2026 CRITICAL CVE-2026-56315 picklescan: stdlib bypass enables arbitrary RCE 9.8 Jun 23, 2026 HIGH CVE-2025-71376 picklescan: scanner bypass enables undetected RCE 8.1 Jun 23, 2026 HIGH CVE-2025-71370 picklescan: scanner bypass enables arbitrary code execution 8.1 Jun 23, 2026 HIGH CVE-2025-71365 picklescan: detection bypass enables RCE via numpy.f2py 8.1 Jun 23, 2026 HIGH CVE-2025-71341 picklescan: scanner bypass enables undetected RCE via pickle 8.1 Jun 23, 2026 HIGH CVE-2025-71358 picklescan: scanner bypass enables RCE via pickle 8.1 Jun 22, 2026 HIGH CVE-2025-71344 picklescan: scanner bypass enables undetected pickle RCE 8.1 Jun 22, 2026 HIGH CVE-2025-71339 picklescan: scanner bypass enables arbitrary code execution 8.1 Jun 22, 2026 HIGH CVE-2025-71351 picklescan: scanner bypass enables RCE via pickle files -- Jun 21, 2026 HIGH CVE-2025-71378 picklescan: detection bypass enables RCE via pickle files 8.1 Jun 21, 2026 HIGH CVE-2025-71357 picklescan: detection bypass enables RCE via malicious models 8.1 Jun 21, 2026 HIGH CVE-2025-71348 picklescan: scanner bypass enables supply chain RCE 8.1 Jun 21, 2026 MEDIUM CVE-2026-56304 picklescan: FileHandler bypass creates filesystem artifacts 6.5 Jun 20, 2026 CRITICAL CVE-2026-53873 picklescan: blocklist bypass allows arbitrary code exec 9.8 Jun 17, 2026 CRITICAL CVE-2026-53874 picklescan: scanner bypass enables pickle RCE 9.8 Jun 17, 2026 HIGH CVE-2026-53872 picklescan: arbitrary file read bypasses RCE blocklist 7.5 Jun 17, 2026 CRITICAL CVE-2026-3490 picklescan: blocklist bypass enables full RCE 10.0 Jun 17, 2026 HIGH CVE-2025-71322 PickleScan: pty.spawn bypass enables RCE in model scans 8.8 Jun 17, 2026 CRITICAL CVE-2025-71325 picklescan: scanner bypass enables RCE via model files 9.8 Jun 17, 2026 CRITICAL CVE-2025-71323 picklescan: ctypes bypass enables full RCE via pickle files 9.8 Jun 17, 2026 CRITICAL CVE-2025-71320 picklescan: deny-list bypass enables arbitrary RCE 9.8 Jun 17, 2026 CRITICAL CVE-2025-71321 picklescan: blocklist bypass allows arbitrary file write/RCE 9.8 Jun 17, 2026 UNKNOWN CVE-2026-53875 picklescan: scanner bypass enables PyTorch RCE -- Jun 17, 2026

Showing 26–50 of 109

Frequently asked questions

What is picklescan?

picklescan is an AI/ML ai security tracked by AI Threat Alert for security vulnerabilities in the pip ecosystem.

How many known vulnerabilities does picklescan have?

picklescan has 109 known CVEs, 12 of them critical, tracked from NVD and GitHub Advisory.

Which ecosystem is picklescan distributed in?

picklescan is distributed via the pip ecosystem and categorized as ai security.

Where does the picklescan vulnerability data come from?

Vulnerability data is sourced from NVD and GitHub Advisory, enriched with CVSS, EPSS, exploit signals, and patch status for each CVE.

How do I assess the risk of picklescan?

Review each CVE below — every entry shows CVSS severity, EPSS exploit probability, exploitation signals, and whether a patched version is available.

Monitor picklescan in your stack

Get instant alerts when new vulnerabilities affect picklescan. CISO analysis, ATLAS technique mappings, and compliance reports included.

Start Monitoring