CVE-2025-1716
4 advisories.
PyPI/picklescan CVE-2025-1716, CVE-2025-1889: medium, EPSS 1.72%
Picklescan Allows Remote Code Execution via Malicious Pickle File Bypassing Static Analysis
Action: Upgrade picklescan to 0.0.22 or later.
pip install picklescan==0.0.22Affected
| introduced | fixed | last affected |
|---|---|---|
| 0 | 0.0.22 | - |
Fixed versions
| 0.0.22 |
Sources
- osv: GHSA-655q-fx9r-782v
- https://github.com/mmaitre314/picklescan/security/advisories/GHSA-655q-fx9r-782v
- https://nvd.nist.gov/vuln/detail/CVE-2025-1716
- https://github.com/mmaitre314/picklescan/commit/78ce704227c51f070c0c5fb4b466d92c62a7aa3d
- https://github.com/mmaitre314/picklescan
- https://github.com/pypa/advisory-database/tree/main/vulns/picklescan/PYSEC-2025-18.yaml
- https://sites.google.com/sonatype.com/vulnerabilities/cve-2025-1716
CVE-2025-1716, CVE-2025-1889 · published · modified · JSON
PyPI/picklescan CVE-2025-1716, CVE-2025-1889: medium, EPSS 1.72%
PyTorch Model Files Can Bypass Pickle Scanners via Unexpected Pickle Extensions
Action: Upgrade picklescan to 0.0.22 or later.
pip install picklescan==0.0.22Affected
| introduced | fixed | last affected |
|---|---|---|
| 0 | 0.0.22 | - |
Fixed versions
| 0.0.22 |
Sources
- osv: GHSA-769v-p64c-89pr
- https://github.com/mmaitre314/picklescan/security/advisories/GHSA-769v-p64c-89pr
- https://nvd.nist.gov/vuln/detail/CVE-2025-1889
- https://github.com/mmaitre314/picklescan/commit/baf03faf88fece56a89534d12ce048e5ee36e50e
- https://github.com/mmaitre314/picklescan
- https://sites.google.com/sonatype.com/vulnerabilities/cve-2025-1889
CVE-2025-1716, CVE-2025-1889 · published · modified · JSON
PyPI/picklescan CVE-2025-1716, CVE-2025-1889: unknown, EPSS 1.72%
picklescan before 0.0.21 does not treat 'pip' as an unsafe global. An attacker could craft a malicious model that uses Pickle to pull in a malicious PyPI package (hosted, for example, on pypi.org or G
Action: Upgrade picklescan to 0.0.21 or later.
pip install picklescan==0.0.21Affected
| introduced | fixed | last affected |
|---|---|---|
| 0 | 0.0.21 | - |
Fixed versions
| 0.0.21 |
Sources
- osv: PYSEC-2025-18
- https://github.com/mmaitre314/picklescan/security/advisories/GHSA-655q-fx9r-782v
- https://github.com/mmaitre314/picklescan/commit/78ce704227c51f070c0c5fb4b466d92c62a7aa3d
- https://sites.google.com/sonatype.com/vulnerabilities/cve-2025-1716
CVE-2025-1716, CVE-2025-1889 · published · modified · JSON
PyPI/picklescan CVE-2025-1716, CVE-2025-1889: critical 9.8, EPSS 1.72%
picklescan before 0.0.22 only considers standard pickle file extensions in the scope for its vulnerability scan. An attacker could craft a malicious model that uses Pickle and include a malicious pick
Action: Upgrade picklescan to 0.0.22 or later.
pip install picklescan==0.0.22Affected
| introduced | fixed | last affected |
|---|---|---|
| 0 | 0.0.22 | - |
Fixed versions
| 0.0.22 |
Sources
- osv: PYSEC-2025-19
- https://sites.google.com/sonatype.com/vulnerabilities/cve-2025-1889
- https://github.com/advisories/GHSA-769v-p64c-89pr
CVE-2025-1716, CVE-2025-1889 · published · modified · JSON