# picklescan (PyPI) vulnerabilities Source: https://junglewise.ai/threats/technologies/picklescan Publisher: Junglewise Threat Intelligence, https://junglewise.ai/threats Updated: 13 November 2026, 03:07 UTC. Rebuilt every hour. Data: https://junglewise.ai/threats/technologies/picklescan.json License: CC BY 4.0 with a link back Junglewise Threat Intelligence has tracked 86 vulnerabilities in picklescan (PyPI): 0 in the last 7 days and 0 in the last 90 days, 16 of them critical and 0 exploited in the wild. The most recent, CVE-2025-71375, was published on 4 July 2026. ## Counts - Last 7 days: 0 - Last 30 days: 0 - Last 90 days: 0 - All time: 86 (16 critical, 0 exploited in the wild) ## About picklescan (PyPI) A security tool for scanning Python pickle files for malicious code. ## Latest picklescan (PyPI) vulnerabilities - [CVE-2025-71375: picklescan detection bypass via _operator.methodcaller](https://junglewise.ai/threats/cve-2025-71375-picklescan-detection-bypass-via-operator-methodcaller) (high, CVSS 8.1, published 4 Jul 2026) - [CVE-2025-71373: picklescan security bypass via operator.methodcaller](https://junglewise.ai/threats/cve-2025-71373-picklescan-security-bypass-via-operator-methodcaller) (high, CVSS 8.1, published 4 Jul 2026) - [CVE-2025-71372: Picklescan detection bypass via numpy getlincoef gadget](https://junglewise.ai/threats/cve-2025-71372-picklescan-detection-bypass-via-numpy-getlincoef-gadget) (high, CVSS 8.1, published 4 Jul 2026) - [CVE-2025-71369: picklescan safety check bypass via PyTorch decoder basichandlers](https://junglewise.ai/threats/cve-2025-71369-picklescan-safety-check-bypass-via-pytorch-decoder-basichandlers) (high, CVSS 8.1, published 4 Jul 2026) - [CVE-2025-71367: picklescan security bypass via _operator.attrgetter function call](https://junglewise.ai/threats/cve-2025-71367-picklescan-security-bypass-via-operator-attrgetter-function-call) (high, CVSS 8.1, published 4 Jul 2026) - [CVE-2025-71366: picklescan security bypass via torch.utils.bottleneck in pickle files](https://junglewise.ai/threats/cve-2025-71366-picklescan-security-bypass-via-torch-utils-bottleneck-in-pickle) (high, CVSS 8.1, published 4 Jul 2026) - [CVE-2025-71364: picklescan detection bypass in asyncio unix_events](https://junglewise.ai/threats/cve-2025-71364-picklescan-detection-bypass-in-asyncio-unix-events) (high, CVSS 8.1, published 4 Jul 2026) - [CVE-2025-71362: picklescan detection bypass in numpy.f2py.crackfortran](https://junglewise.ai/threats/cve-2025-71362-picklescan-detection-bypass-in-numpy-f2py-crackfortran) (high, CVSS 8.1, published 4 Jul 2026) - [CVE-2025-71360: picklescan detection bypass via idlelib.calltip.get_entity](https://junglewise.ai/threats/cve-2025-71360-picklescan-detection-bypass-via-idlelib-calltip-get-entity) (high, CVSS 8.1, published 4 Jul 2026) - [CVE-2025-71359: picklescan detection bypass via lib2to3 Grammar.loads](https://junglewise.ai/threats/cve-2025-71359-picklescan-detection-bypass-via-lib2to3-grammar-loads) (high, CVSS 8.1, published 4 Jul 2026) - [CVE-2025-71356: picklescan detection bypass in torch.fx.experimental.symbolic_shapes](https://junglewise.ai/threats/cve-2025-71356-picklescan-detection-bypass-in-torch-fx-experimental-symbolic) (high, CVSS 8.1, published 4 Jul 2026) - [CVE-2025-71353: picklescan detection bypass via torch._dynamo.guards.GuardBuilder.get](https://junglewise.ai/threats/cve-2025-71353-picklescan-detection-bypass-via-torch-dynamo-guards-guardbuilder) (high, CVSS 8.1, published 4 Jul 2026) - [CVE-2025-71347: picklescan security bypass via numpy.f2py.crackfortran.param_eval](https://junglewise.ai/threats/cve-2025-71347-picklescan-security-bypass-via-numpy-f2py-crackfortran-param-eval) (high, CVSS 8.1, published 4 Jul 2026) - [CVE-2025-71345: picklescan detection bypass via torch.utils.bottleneck](https://junglewise.ai/threats/cve-2025-71345-picklescan-detection-bypass-via-torch-utils-bottleneck) (high, CVSS 8.1, published 4 Jul 2026) - [CVE-2025-71343: picklescan detection bypass via lib2to3 ParserGenerator](https://junglewise.ai/threats/cve-2025-71343-picklescan-detection-bypass-via-lib2to3-parsergenerator) (high, CVSS 8.1, published 4 Jul 2026) - [CVE-2025-71342: picklescan detection bypass via idlelib.run.Executive.runcode](https://junglewise.ai/threats/cve-2025-71342-picklescan-detection-bypass-via-idlelib-run-executive-runcode) (high, CVSS 8.1, published 4 Jul 2026) - [CVE-2025-71374: picklescan detection bypass via profile.Profile.run](https://junglewise.ai/threats/cve-2025-71374-picklescan-detection-bypass-via-profile-profile-run) (high, CVSS 8.1, published 30 Jun 2026) - [CVE-2025-71371: picklescan detection bypass via code.InteractiveInterpreter.runcode](https://junglewise.ai/threats/cve-2025-71371-picklescan-detection-bypass-via-code-interactiveinterpreter) (high, CVSS 8.1, published 30 Jun 2026) - [CVE-2025-71368: picklescan detection bypass via doctest.debug_script](https://junglewise.ai/threats/cve-2025-71368-picklescan-detection-bypass-via-doctest-debug-script) (high, CVSS 8.1, published 30 Jun 2026) - [CVE-2025-71363: picklescan code execution bypass via cProfile.run in pickle reduce](https://junglewise.ai/threats/cve-2025-71363-picklescan-code-execution-bypass-via-cprofile-run-in-pickle) (high, CVSS 8.1, published 30 Jun 2026) - [CVE-2025-71355: Picklescan detection bypass via unsafe Numpy functions](https://junglewise.ai/threats/cve-2025-71355-picklescan-detection-bypass-via-unsafe-numpy-functions) (medium, CVSS 4, published 30 Jun 2026) - [CVE-2025-71352: picklescan detection bypass via trace.Trace.runctx](https://junglewise.ai/threats/cve-2025-71352-picklescan-detection-bypass-via-trace-trace-runctx) (high, CVSS 8.1, published 30 Jun 2026) - [CVE-2025-71350: picklescan detection bypass via torch.utils.collect_env.run](https://junglewise.ai/threats/cve-2025-71350-picklescan-detection-bypass-via-torch-utils-collect-env-run) (high, CVSS 8.1, published 30 Jun 2026) - [CVE-2025-71349: picklescan detection bypass via trace.Trace.run function](https://junglewise.ai/threats/cve-2025-71349-picklescan-detection-bypass-via-trace-trace-run-function) (high, CVSS 8.1, published 30 Jun 2026) - [Duplicate Advisory : Picklescan is missing detection when calling built-in python idlelib.pyshell.ModifiedInterpreter.runcode](https://junglewise.ai/threats/duplicate-advisory-picklescan-is-missing-detection-when-calling-built-308bd178) (high, CVSS 8.1, published 26 Jun 2026) ## Most severe picklescan (PyPI) vulnerabilities - [CVE-2026-3490: picklescan blocklist bypass via pkgutil.resolve_name](https://junglewise.ai/threats/cve-2026-3490-picklescan-blocklist-bypass-via-pkgutil-resolve-name) (critical, CVSS 10, published 17 Jun 2026) - [PickleScan blocklist bypass via pkgutil.resolve_name](https://junglewise.ai/threats/picklescan-blocklist-bypass-via-pkgutil-resolve-name-74c87206) (critical, CVSS 10, published 17 Jun 2026) - [CVE-2026-56315: picklescan remote code execution via unblocked standard library modules](https://junglewise.ai/threats/cve-2026-56315-picklescan-remote-code-execution-via-unblocked-standard-library) (critical, CVSS 9.8, published 23 Jun 2026) - [CVE-2026-53874: picklescan unsafe deserialization via obfuscated eval call](https://junglewise.ai/threats/cve-2026-53874-picklescan-unsafe-deserialization-via-obfuscated-eval-call) (critical, CVSS 9.8, published 17 Jun 2026) - [CVE-2025-71323: picklescan remote code execution via unblocked ctypes module](https://junglewise.ai/threats/cve-2025-71323-picklescan-remote-code-execution-via-unblocked-ctypes-module) (critical, CVSS 9.8, published 17 Jun 2026) - [CVE-2026-53873: picklescan incomplete blocklist bypass in profile module](https://junglewise.ai/threats/cve-2026-53873-picklescan-incomplete-blocklist-bypass-in-profile-module) (critical, CVSS 9.8, published 17 Jun 2026) - [CVE-2025-71321: Picklescan arbitrary file write via distutils blocklist bypass](https://junglewise.ai/threats/cve-2025-71321-picklescan-arbitrary-file-write-via-distutils-blocklist-bypass) (critical, CVSS 9.8, published 17 Jun 2026) - [CVE-2025-71320: picklescan incomplete deny-list bypass leading to RCE](https://junglewise.ai/threats/cve-2025-71320-picklescan-incomplete-deny-list-bypass-leading-to-rce) (critical, CVSS 9.8, published 17 Jun 2026) - [CVE-2025-71325: picklescan detection bypass in STACK_GLOBAL opcode parsing](https://junglewise.ai/threats/cve-2025-71325-picklescan-detection-bypass-in-stack-global-opcode-parsing) (critical, CVSS 9.8, published 17 Jun 2026) - [PickleScan incomplete blocklist RCE via stdlib modules](https://junglewise.ai/threats/picklescan-incomplete-blocklist-rce-via-stdlib-modules-3e253cc3) (critical, CVSS 9.8, published 23 Jun 2026) ## Vulnerabilities per week Nothing was published in the last eight weeks. | Week of | Vulns | Critical | Exploited | | --- | --- | --- | --- | | 17 Aug 2026 | 0 | 0 | 0 | | 24 Aug 2026 | 0 | 0 | 0 | | 31 Aug 2026 | 0 | 0 | 0 | | 7 Sep 2026 | 0 | 0 | 0 | | 14 Sep 2026 | 0 | 0 | 0 | | 21 Sep 2026 | 0 | 0 | 0 | | 28 Sep 2026 | 0 | 0 | 0 | | 5 Oct 2026 | 0 | 0 | 0 | | 12 Oct 2026 | 0 | 0 | 0 | | 19 Oct 2026 | 0 | 0 | 0 | | 26 Oct 2026 | 0 | 0 | 0 | | 2 Nov 2026 | 0 | 0 | 0 | | 9 Nov 2026 | 0 | 0 | 0 | ## Other PyPI technologies - [tensorflow (PyPI)](https://junglewise.ai/threats/technologies/pypi-tensorflow): 435 vulnerabilities - [tensorflow-cpu (PyPI)](https://junglewise.ai/threats/technologies/tensorflow-cpu): 430 vulnerabilities - [tensorflow-gpu (PyPI)](https://junglewise.ai/threats/technologies/tensorflow-gpu): 427 vulnerabilities - [open-webui (PyPI)](https://junglewise.ai/threats/technologies/open-webui): 177 vulnerabilities - [Django (PyPI)](https://junglewise.ai/threats/technologies/django): 173 vulnerabilities - [apache-airflow (PyPI)](https://junglewise.ai/threats/technologies/apache-airflow): 159 vulnerabilities - [pillow (PyPI)](https://junglewise.ai/threats/technologies/pillow): 125 vulnerabilities - [praisonai (PyPI)](https://junglewise.ai/threats/technologies/pypi-praisonai): 120 vulnerabilities - [vllm (PyPI)](https://junglewise.ai/threats/technologies/pypi-vllm): 117 vulnerabilities - [plone (PyPI)](https://junglewise.ai/threats/technologies/pypi-plone): 101 vulnerabilities - [mlflow (PyPI)](https://junglewise.ai/threats/technologies/mlflow): 88 vulnerabilities - [exiv2 (PyPI)](https://junglewise.ai/threats/technologies/exiv2): 85 vulnerabilities ## Sources NVD, GitHub Security Advisories, OSV, the CISA Known Exploited Vulnerabilities catalog, FIRST EPSS and vendor advisories. Rebuilt every hour. Cite as: Junglewise Threat Intelligence, "picklescan (PyPI) vulnerabilities", https://junglewise.ai/threats/technologies/picklescan, 13 November 2026.