picklescan@0.0.9 vulnerabilities

picklescan is a Security scanner detecting Python Pickle files performing suspicious actions

Affected versions of this package are vulnerable to Protection Mechanism Failure via the _unsafe_globals check. An attacker can bypass detection of malicious content by crafting malicious pickle payloads that use subclasses of dangerous imports instead of the exact module names.

Upgrade picklescan to version 0.0.31 or higher.

picklescan is a Security scanner detecting Python Pickle files performing suspicious actions

Affected versions of this package are vulnerable to Protection Mechanism Failure when processing ZIP files. An attacker can bypass detection of malicious payloads by crafting ZIP archives with invalid CRC values, causing the scan to fail and return no results while still allowing other tools to load the contents.

Upgrade picklescan to version 0.0.31 or higher.

picklescan is a Security scanner detecting Python Pickle files performing suspicious actions

Affected versions of this package are vulnerable to Protection Mechanism Failure via the scan_bytes function. An attacker can bypass detection of malicious content by disguising a standard pickle file with a PyTorch-related extension, causing the scanner to fail to analyze the file as a pickle.

Upgrade picklescan to version 0.0.31 or higher.

picklescan is a Security scanner detecting Python Pickle files performing suspicious actions

Affected versions of this package are vulnerable to Remote Code Execution (RCE) due to using torch.utils.data.datapipes.utils.decoder.basichandlers function. An attacker can execute arbitrary code by crafting a malicious pickle file that bypasses detection and is subsequently loaded.

Upgrade picklescan to version 0.0.28 or higher.

picklescan is a Security scanner detecting Python Pickle files performing suspicious actions

Affected versions of this package are vulnerable to Remote Code Execution (RCE) due to using torch.utils._config_module.load_config function. An attacker can execute arbitrary code by crafting a malicious pickle file that leverages this function to bypass security checks, which may then be loaded with pickle by a user.

Upgrade picklescan to version 0.0.28 or higher.

picklescan is a Security scanner detecting Python Pickle files performing suspicious actions

Affected versions of this package are vulnerable to Remote Code Execution (RCE) due to using the torch._dynamo.guards.GuardBuilder.get function. An attacker can execute arbitrary code by crafting a malicious pickle file that leverages this function and remains undetected during security checks, and is then loaded with pickle by a user.

Upgrade picklescan to version 0.0.28 or higher.

picklescan is a Security scanner detecting Python Pickle files performing suspicious actions

Affected versions of this package are vulnerable to Remote Code Execution (RCE) due to insufficient detection in the reduce method involving the torch.jit.unsupported_tensor_ops.execWrapper function. An attacker can execute arbitrary code by crafting a malicious pickle file that bypasses security checks and is subsequently loaded.

Upgrade picklescan to version 0.0.28 or higher.

picklescan is a Security scanner detecting Python Pickle files performing suspicious actions

Affected versions of this package are vulnerable to Remote Code Execution (RCE) due to the use of torch.utils.collect_env.run in the reduce method. An attacker can execute arbitrary code by crafting a malicious pickle file that leverages this function to bypass detection and trigger code execution upon loading.

Upgrade picklescan to version 0.0.28 or higher.

picklescan is a Security scanner detecting Python Pickle files performing suspicious actions

Affected versions of this package are vulnerable to Remote Code Execution (RCE) via the bottleneck_main.run_cprofile function. An attacker can craft a malicious pickle file that leverages this function to bypass detection and trigger code execution upon deserialization by a user.

Upgrade picklescan to version 0.0.28 or higher.

picklescan is a Security scanner detecting Python Pickle files performing suspicious actions

Affected versions of this package are vulnerable to Remote Code Execution (RCE) due to insufficient detection in the evaluate_guards_expression function. An attacker can execute arbitrary code by crafting a malicious pickle file that leverages this function during deserialization, which will not be detected as malicious and may therefore be trusted by a user to load unsafely with pickle.

Upgrade picklescan to version 0.0.28 or higher.

picklescan is a Security scanner detecting Python Pickle files performing suspicious actions

Affected versions of this package are vulnerable to Deserialization of Untrusted Data via the STACK_GLOBAL opcode parsing process. An attacker can bypass detection mechanisms by crafting a malicious pickle file that exploits a logic flaw in argument tracking, causing the parser to mishandle arguments and trigger unexpected exceptions.

Upgrade picklescan to version 0.0.27 or higher.

picklescan is a Security scanner detecting Python Pickle files performing suspicious actions

Affected versions of this package are vulnerable to Incomplete List of Disallowed Inputs in scanner.py, which does not include timeit or other modules that can be leveraged for unintended command execution. An attacker can cause exec() to be invoked from inside a malicious pickle object by calling timeit.timeit(), and then convincing a user to execute the apparently non-dangerous payload after it passes a scan.

Upgrade picklescan to version 0.0.25 or higher.

picklescan is a Security scanner detecting Python Pickle files performing suspicious actions

Affected versions of this package are vulnerable to Deserialization of Untrusted Data in scanner.py, which does not include numpy.testing._private.utils or other modules that can be leveraged for unintended command execution. An attacker can cause exec() to be invoked from inside a malicious pickle object by calling runstring in it, and then convincing a user to execute the apparently non-dangerous payload after it passes a scan.

Upgrade picklescan to version 0.0.25 or higher.

picklescan is a Security scanner detecting Python Pickle files performing suspicious actions

Affected versions of this package are vulnerable to Incomplete List of Disallowed Inputs in scanner.py, which does not include ssl or other modules that can be leveraged for remote operations. An attacker can read and exfiltrate sensitive local file content by constructing a malicious domain name and triggering a DNS resolution. The DNS resolution is performed after deserializaition and may call ssl.get_server_certificate(), which bypasses protections.

Upgrade picklescan to version 0.0.25 or higher.

picklescan is a Security scanner detecting Python Pickle files performing suspicious actions

Affected versions of this package are vulnerable to Insufficient Verification of Data Authenticity when PickleScan attempts to extract and scan PyTorch model archives, an attacker can manipulate the ZIP file by modifying the filename in the ZIP header while retaining the original filename in the directory listing. This causes PickleScan to raise a BadZipFile error, preventing proper scanning, while PyTorch's more lenient ZIP handling still allows the model to load, enabling malicious payloads to bypass detection.

Upgrade picklescan to version 0.0.23 or higher.

picklescan is a Security scanner detecting Python Pickle files performing suspicious actions

Affected versions of this package are vulnerable to Insufficient Verification of Data Authenticity due to improper handling of modified ZIP file flag bits. Attackers can exploit this by altering specific bits in the ZIP file headers within PyTorch model archives, embedding malicious pickle files that remain undetected by PickleScan while still being successfully loaded by PyTorch's torch.load().

Upgrade picklescan to version 0.0.23 or higher.

picklescan is a Security scanner detecting Python Pickle files performing suspicious actions

Affected versions of this package are vulnerable to Reliance on File Name or Extension of Externally-Supplied File due to insufficient scanning of non-standard pickle file extensions.

Upgrade picklescan to version 0.0.22 or higher.

picklescan is a Security scanner detecting Python Pickle files performing suspicious actions

Affected versions of this package are vulnerable to Incomplete List of Disallowed Inputs which does not include pip under _unsafe_globals in scanner.py. An attacker can execute arbitrary code by loading a malicious model using pip.main(), which relies on pickle for deserialization.

Upgrade picklescan to version 0.0.21 or higher.