Executive brief
Fickling has a bypass via runpy.run_path() and runpy.run_module()
Affected products
- PyPI fickling
Junglewise Threat Intelligence
CVE-2026-22606: PYSEC-2026-1373 - Fickling has a bypass via runpy.run_path() and runpy.run_module()
CVE-2026-22606 · Severity: medium · CVSS 4 · Published 2026-07-07
Technologies: fickling (PyPI). Vendors: PyPI.
Related threats
- PYSEC-2026-1370 - Fickling vulnerable to detection bypass due to "builtins" blindness
- PYSEC-2026-1372 - Fickling has Static Analysis Bypass via Incomplete Dangerous Module Blocklist
- PYSEC-2026-1369 - Fickling vulnerable to use of ctypes and pydoc gadget chain to bypass detection
- PYSEC-2026-1371 - Fickling Blocklist Bypass: cProfile.run()
- PYSEC-2026-1368 - Fickling has missing detection for marshal.loads and types.FunctionType in unsafe modules list