CVE-2026-14535
1 advisory.
PyPI/fickling CVE-2026-14535: critical 9.8, EPSS 0.56%
In Trail of Bits fickling versions up to and including 0.1.11, the UnsafeImportsML analysis pass unconditionally calls AnalysisContext.shorten_code(node) on every import node it inspects, regardless o
Action: Upgrade fickling to 0.1.12 or later.
pip install fickling==0.1.12Affected
| introduced | fixed | last affected |
|---|---|---|
| 0 | 0.1.12 | - |
Fixed versions
| 0.1.12 |
Sources
- osv: PYSEC-2026-2150
- https://github.com/trailofbits/fickling/releases/tag/v0.1.12
- https://github.com/trailofbits/fickling/commit/41ce7cb01edd97072994039574a2301ebb3f463d
- https://github.com/trailofbits/fickling/pull/278
- https://github.com/trailofbits/fickling/security/advisories/GHSA-cffv-grgg-g429
CVE-2026-14535 · published · modified · JSON