Picklescan
109 CVEs tracked. None of them is in CISA KEV.
This hub aggregates every CVE we track for Picklescan, a product in the oss libraries space. Use it to gauge the current risk picture and drill into individual advisories.
Picklescan CVEs per month
| Month | CVEs |
|---|---|
| 2024-10 | 0 |
| 2024-11 | 0 |
| 2024-12 | 0 |
| 2025-01 | 0 |
| 2025-02 | 1 |
| 2025-03 | 3 |
| 2025-04 | 3 |
| 2025-05 | 0 |
| 2025-06 | 0 |
| 2025-07 | 0 |
| 2025-08 | 29 |
| 2025-09 | 3 |
| 2025-10 | 0 |
| 2025-11 | 0 |
| 2025-12 | 13 |
| 2026-01 | 1 |
| 2026-02 | 3 |
| 2026-03 | 3 |
| 2026-04 | 0 |
| 2026-05 | 0 |
| 2026-06 | 34 |
| 2026-07 | 16 |
| 2026-08 | 0 |
| 2026-09 | 0 |
Severity
How the 109 CVEs score on CVSS. Severity is not exploitation: KEV is counted above.
- Critical12
- High41
- Medium2
Latest CVEs
The 15 most recently published vulnerabilities affecting Picklescan.
- CVE-2025-71375picklescan - Undetected Remote Code Execution via _operator.methodcaller8.1
- CVE-2025-71373picklescan - Remote Code Execution via operator.methodcaller Detection Bypass8.1
- CVE-2025-71369picklescan - Unsafe Deserialization via torch.utils.data.datapipes.utils.decoder.basichandlers8.1
- CVE-2025-71372Picklescan - Arbitrary Code Execution via numpy.f2py.crackfortran.getlincoef Gadget8.1
- CVE-2025-71367picklescan - Remote Code Execution via _operator.attrgetter Detection Bypass8.1
- CVE-2025-71366picklescan - Arbitrary Code Execution via torch.utils.bottleneck.__main__.run_cprofile8.1
- CVE-2025-71364picklescan - Arbitrary Code Execution via Undetected asyncio.unix_events._UnixSubprocessTransport._start8.1
- CVE-2025-71362picklescan - Arbitrary Code Execution via Unsafe Deserialization in numpy.f2py.crackfortran8.1
- CVE-2025-71360picklescan - Remote Code Execution via Undetected idlelib.calltip.get_entity8.1
- CVE-2025-71359picklescan - Unsafe Deserialization via lib2to3.pgen2.grammar.Grammar.loads8.1
- CVE-2025-71356picklescan - Arbitrary Code Execution via torch.fx.experimental.symbolic_shapes.ShapeEnv.evaluate_guards_expression8.1
- CVE-2025-71353picklescan - Remote Code Execution via torch._dynamo.guards.GuardBuilder.get8.1
- CVE-2025-71347picklescan - Undetected Remote Code Execution via numpy.f2py.crackfortran.param_eval8.1
- CVE-2025-71345picklescan - Arbitrary Code Execution via torch.utils.bottleneck.__main__.run_autograd_prof8.1
- CVE-2025-71343picklescan - Arbitrary Code Execution via lib2to3.pgen2.pgen.ParserGenerator.make_label Detection Bypass8.1
Product grouping is registry-driven, with AI assist and human review. How it works