{"action":"Upgrade picklescan to 0.0.29 or later.","affected":[{"fixed":"0.0.29","introduced":"0"}],"component":"picklescan","cve_ids":["CVE-2025-71352"],"ecosystem":"PyPI","epss":0.00716,"exploited":false,"fixed_versions":["0.0.29"],"ghsa_id":"GHSA-g344-hcph-8vgg","id":"tcs_01M5KFGHZVRCHFDVBJC4MJDNYK","modified_at":"2026-07-08T07:10:49.972180445Z","published_at":"2025-08-26T18:35:23Z","references":["https://osv.dev/vulnerability/GHSA-g344-hcph-8vgg","https://github.com/mmaitre314/picklescan/security/advisories/GHSA-g344-hcph-8vgg","https://github.com/mmaitre314/picklescan/commit/aecd11be98702caa9ba9b12189d91ad596a36114","https://github.com/mmaitre314/picklescan"],"severity":{"label":"medium"},"sources":[{"source":"osv","source_id":"GHSA-g344-hcph-8vgg","url":"https://osv.dev/vulnerability/GHSA-g344-hcph-8vgg"}],"summary":"Picklescan has a missing detection when calling built-in python trace.Trace.runctx"}