CVE-2026-53875
2 advisories.
PyPI/picklescan CVE-2026-53875: high, EPSS 0.69%
Picklescan (scan_pytorch) Bypass via dynamic eval MAGIC_NUMBER
Action: Upgrade picklescan to 1.0.3 or later.
pip install picklescan==1.0.3Affected
| introduced | fixed | last affected |
|---|---|---|
| 0 | 1.0.3 | - |
Fixed versions
| 1.0.3 |
Sources
- osv: GHSA-97f8-7cmv-76j2
- https://github.com/mmaitre314/picklescan/security/advisories/GHSA-97f8-7cmv-76j2
- https://nvd.nist.gov/vuln/detail/CVE-2026-53875
- https://github.com/mmaitre314/picklescan/commit/134179474539648ba7dee1317959529fbd0e7f89
- https://github.com/mmaitre314/picklescan/commit/2a8383cfeb4158567f9770d86597300c9e508d0f
- https://github.com/mmaitre314/picklescan/commit/b9997634683a4f4bd0c7e3701e7ce7e90fe70e8c
- https://github.com/mmaitre314/picklescan
- https://www.vulncheck.com/advisories/picklescan-scanning-bypass-via-dynamic-eval-in-scan-pytorch
CVE-2026-53875 · published · modified · JSON
PyPI/picklescan CVE-2026-53875: unknown, EPSS 0.69%
Picklescan (scan_pytorch) Bypass via dynamic eval MAGIC_NUMBER
Action: Upgrade picklescan to 1.0.3 or later.
pip install picklescan==1.0.3Affected
| introduced | fixed | last affected |
|---|---|---|
| 0 | 1.0.3 | - |
Fixed versions
| 1.0.3 |
Sources
- osv: PYSEC-2026-2873
- https://github.com/mmaitre314/picklescan/security/advisories/GHSA-97f8-7cmv-76j2
- https://nvd.nist.gov/vuln/detail/CVE-2026-53875
- https://github.com/mmaitre314/picklescan/commit/134179474539648ba7dee1317959529fbd0e7f89
- https://github.com/mmaitre314/picklescan/commit/2a8383cfeb4158567f9770d86597300c9e508d0f
- https://github.com/mmaitre314/picklescan/commit/b9997634683a4f4bd0c7e3701e7ce7e90fe70e8c
- https://github.com/mmaitre314/picklescan
- https://www.vulncheck.com/advisories/picklescan-scanning-bypass-via-dynamic-eval-in-scan-pytorch
- https://pypi.org/project/picklescan
- https://github.com/advisories/GHSA-97f8-7cmv-76j2
CVE-2026-53875 · published · modified · JSON