PyPI/picklescan CVE-2025-1716, CVE-2025-1889: critical 9.8, EPSS 1.72%

PyTorch Model Files Can Bypass Pickle Scanners via Unexpected Pickle Extensions

Action: Upgrade picklescan to 0.0.22 or later.

pip install picklescan==0.0.22

Affected

Fixed versions

Sources

• osv: GHSA-769v-p64c-89pr
• nvd: CVE-2025-1716
• https://github.com/mmaitre314/picklescan/security/advisories/GHSA-769v-p64c-89pr
• https://nvd.nist.gov/vuln/detail/CVE-2025-1889
• https://github.com/mmaitre314/picklescan/commit/baf03faf88fece56a89534d12ce048e5ee36e50e
• https://github.com/mmaitre314/picklescan
• https://sites.google.com/sonatype.com/vulnerabilities/cve-2025-1889

CVE-2025-1716, CVE-2025-1889 · published 2025-03-03T19:59:46Z · modified 2025-04-09T17:59:23.478228Z · JSON