PyPI/picklescan CVE-2025-71361: high 8.1, EPSS 0.43%

Picklescan has a missing detection when calling built-in python idlelib.calltip.Calltip

Action: Upgrade picklescan to 0.0.29 or later.

pip install picklescan==0.0.29

Affected

Fixed versions

Sources

• osv: PYSEC-2026-1786
• nvd: CVE-2025-71361
• https://github.com/mmaitre314/picklescan/security/advisories/GHSA-8r4j-24qv-fmq9
• https://github.com/mmaitre314/picklescan/commit/aecd11be98702caa9ba9b12189d91ad596a36114
• https://github.com/mmaitre314/picklescan
• https://pypi.org/project/picklescan
• https://github.com/advisories/GHSA-8r4j-24qv-fmq9

CVE-2025-71361 · published 2026-07-07T16:03:02.348909Z · modified 2026-07-07T17:48:02.298480313Z · JSON