Ecosystem	Package	Version

Vulnerabilities

sonatype-2025-007671

sonatype-2025-007671

picklescan - Deserialization of Untrusted Data

Published Dec 30, 2025

https://github.com/advisories/GHSA-r8g5-cgf2-4m4m

CVSS ScoreHigh

8.9

Ecosystem	Package	Version


pypi	picklescan	0.0.10
pypi	picklescan	0.0.11
pypi	picklescan	0.0.12
pypi	picklescan	0.0.13
pypi	picklescan	0.0.14
pypi	picklescan	0.0.15
pypi	picklescan	0.0.16
pypi	picklescan	0.0.17
pypi	picklescan	0.0.18
pypi	picklescan	0.0.19
pypi	picklescan	0.0.1
pypi	picklescan	0.0.20
pypi	picklescan	0.0.21
pypi	picklescan	0.0.22
pypi	picklescan	0.0.23
pypi	picklescan	0.0.24
pypi	picklescan	0.0.25
pypi	picklescan	0.0.26
pypi	picklescan	0.0.27
pypi	picklescan	0.0.28
pypi	picklescan	0.0.29
pypi	picklescan	0.0.2
pypi	picklescan	0.0.30
pypi	picklescan	0.0.31
pypi	picklescan	0.0.32
pypi	picklescan	0.0.3
pypi	picklescan	0.0.4
pypi	picklescan	0.0.5
pypi	picklescan	0.0.6
pypi	picklescan	0.0.7
pypi	picklescan	0.0.8
pypi	picklescan	0.0.9

sonatype-2025-007671 | Components Impacted | Sonatype Guide | Sonatype Guide