PyPI/fickling CVE-2025-67747: unknown, EPSS 0.28%
Fickling has missing detection for marshal.loads and types.FunctionType in unsafe modules list
Action: Upgrade fickling to 0.1.6 or later.
pip install fickling==0.1.6Affected
| introduced | fixed | last affected |
|---|---|---|
| 0 | 0.1.6 | - |
Fixed versions
| 0.1.6 |
Sources
- osv: PYSEC-2026-1368
- https://github.com/trailofbits/fickling/security/advisories/GHSA-565g-hwwr-4pp3
- https://nvd.nist.gov/vuln/detail/CVE-2025-67747
- https://github.com/trailofbits/fickling/pull/186
- https://github.com/trailofbits/fickling/commit/4e34561301bda1450268d1d7b0b2b151de33b913
- https://github.com/trailofbits/fickling
- https://github.com/trailofbits/fickling/releases/tag/v0.1.6
- https://pypi.org/project/fickling
- https://github.com/advisories/GHSA-565g-hwwr-4pp3
CVE-2025-67747 · published · modified · JSON