PyPI/fickling CVE-2026-22612: high 7.8, EPSS 0.32%
Fickling vulnerable to detection bypass due to "builtins" blindness
Action: Upgrade fickling to 0.1.7 or later.
pip install fickling==0.1.7Affected
| introduced | fixed | last affected |
|---|---|---|
| 0 | 0.1.7 | - |
Fixed versions
| 0.1.7 |
Sources
- osv: PYSEC-2026-1370
- nvd: CVE-2026-22612
- https://github.com/trailofbits/fickling/security/advisories/GHSA-h4rm-mm56-xf63
- https://github.com/trailofbits/fickling/pull/195
- https://github.com/trailofbits/fickling/commit/9f309ab834797f280cb5143a2f6f987579fa7cdf
- https://github.com/trailofbits/fickling
- https://github.com/trailofbits/fickling/blob/977b0769c13537cd96549c12bb537f05464cf09c/test/test_bypasses.py#L349
- https://github.com/trailofbits/fickling/releases/tag/v0.1.7
- https://pypi.org/project/fickling
- https://github.com/advisories/GHSA-h4rm-mm56-xf63
CVE-2026-22612 · published · modified · JSON