CVE-2025-71325
2 advisories.
PyPI/picklescan CVE-2025-71325: high, EPSS 0.60%
Picklescan has pickle parsing logic flaw that leads to malicious pickle file bypass
Action: Upgrade picklescan to 0.0.27 or later.
pip install picklescan==0.0.27Affected
| introduced | fixed | last affected |
|---|---|---|
| 0 | 0.0.27 | - |
Fixed versions
| 0.0.27 |
Sources
- osv: GHSA-9gvj-pp9x-gcfr
- https://github.com/mmaitre314/picklescan/security/advisories/GHSA-9gvj-pp9x-gcfr
- https://nvd.nist.gov/vuln/detail/CVE-2025-71325
- https://github.com/mmaitre314/picklescan/commit/2a8383cfeb4158567f9770d86597300c9e508d0f
- https://github.com/mmaitre314/picklescan/commit/58983e1c20973ac42f2df7ff15d7c8cd32f9b688
- https://github.com/mmaitre314/picklescan
- https://github.com/mmaitre314/picklescan/blob/2a8383cfeb4158567f9770d86597300c9e508d0f/src/picklescan/scanner.py#L255
- https://github.com/mmaitre314/picklescan/blob/2a8383cfeb4158567f9770d86597300c9e508d0f/src/picklescan/scanner.py#L281
- https://github.com/mmaitre314/picklescan/releases/tag/v0.0.27
- https://www.vulncheck.com/advisories/picklescan-detection-bypass-via-stack-global-opcode-parsing-logic-flaw
CVE-2025-71325 · published · modified · JSON
PyPI/picklescan CVE-2025-71325: unknown, EPSS 0.60%
Picklescan has pickle parsing logic flaw that leads to malicious pickle file bypass
Action: Upgrade picklescan to 0.0.27 or later.
pip install picklescan==0.0.27Affected
| introduced | fixed | last affected |
|---|---|---|
| 0 | 0.0.27 | - |
Fixed versions
| 0.0.27 |
Sources
- osv: PYSEC-2026-1788
- https://github.com/mmaitre314/picklescan/security/advisories/GHSA-9gvj-pp9x-gcfr
- https://nvd.nist.gov/vuln/detail/CVE-2025-71325
- https://github.com/mmaitre314/picklescan/commit/2a8383cfeb4158567f9770d86597300c9e508d0f
- https://github.com/mmaitre314/picklescan/commit/58983e1c20973ac42f2df7ff15d7c8cd32f9b688
- https://github.com/mmaitre314/picklescan
- https://github.com/mmaitre314/picklescan/blob/2a8383cfeb4158567f9770d86597300c9e508d0f/src/picklescan/scanner.py#L255
- https://github.com/mmaitre314/picklescan/blob/2a8383cfeb4158567f9770d86597300c9e508d0f/src/picklescan/scanner.py#L281
- https://github.com/mmaitre314/picklescan/releases/tag/v0.0.27
- https://www.vulncheck.com/advisories/picklescan-detection-bypass-via-stack-global-opcode-parsing-logic-flaw
- https://pypi.org/project/picklescan
- https://github.com/advisories/GHSA-9gvj-pp9x-gcfr
CVE-2025-71325 · published · modified · JSON