Ecosystem	Package	Version

Vulnerabilities

sonatype-2026-000290

sonatype-2026-000290

picklescan - Deserialization of Untrusted Data

Published Feb 3, 2026

https://github.com/advisories/GHSA-m7j5-r2p5-c39r

CVSS ScoreMedium

5.5

Ecosystem	Package	Version


pypi	picklescan	0.0.10
pypi	picklescan	0.0.11
pypi	picklescan	0.0.12
pypi	picklescan	0.0.13
pypi	picklescan	0.0.14
pypi	picklescan	0.0.15
pypi	picklescan	0.0.16
pypi	picklescan	0.0.17
pypi	picklescan	0.0.18
pypi	picklescan	0.0.19
pypi	picklescan	0.0.1
pypi	picklescan	0.0.20
pypi	picklescan	0.0.21
pypi	picklescan	0.0.22
pypi	picklescan	0.0.23
pypi	picklescan	0.0.24
pypi	picklescan	0.0.25
pypi	picklescan	0.0.26
pypi	picklescan	0.0.27
pypi	picklescan	0.0.28
pypi	picklescan	0.0.29
pypi	picklescan	0.0.2
pypi	picklescan	0.0.30
pypi	picklescan	0.0.31
pypi	picklescan	0.0.32
pypi	picklescan	0.0.33
pypi	picklescan	0.0.34
pypi	picklescan	0.0.35
pypi	picklescan	0.0.3
pypi	picklescan	0.0.4
pypi	picklescan	0.0.5
pypi	picklescan	0.0.6
pypi	picklescan	0.0.7
pypi	picklescan	0.0.8
pypi	picklescan	0.0.9
pypi	picklescan	1.0.0

sonatype-2026-000290 | Components Impacted | Sonatype Guide | Sonatype Guide