{"action":"Upgrade picklescan to 0.0.29 or later.","affected":[{"fixed":"0.0.29","introduced":"0"}],"component":"picklescan","cve_ids":["CVE-2025-71359"],"ecosystem":"PyPI","epss":0.00613,"exploited":false,"fixed_versions":["0.0.29"],"ghsa_id":"GHSA-f54q-57x4-jg88","id":"tcs_01M5KFEFDFZWGH219T5WDTPR98","modified_at":"2026-07-08T07:23:52.564292531Z","published_at":"2025-08-26T18:36:02Z","references":["https://osv.dev/vulnerability/GHSA-f54q-57x4-jg88","https://github.com/mmaitre314/picklescan/security/advisories/GHSA-f54q-57x4-jg88","https://github.com/mmaitre314/picklescan/commit/aecd11be98702caa9ba9b12189d91ad596a36114","https://github.com/mmaitre314/picklescan"],"severity":{"label":"medium"},"sources":[{"source":"osv","source_id":"GHSA-f54q-57x4-jg88","url":"https://osv.dev/vulnerability/GHSA-f54q-57x4-jg88"}],"summary":"Picklescan has a missing detection when calling built-in python lib2to3.pgen2.grammar.Grammar.loads"}