Threats tagged 'ghsa-3gf5-cxq9-w223'

Picklescan versions prior to 0.0.30 fail to detect malicious payloads that exploit the idlelib.pyshell.ModifiedInterpreter.runcode function during pickle deserialization. This allows attackers to embed and execute arbitrary code when a malicious pickle file is loaded, posing a risk to any user relying on Picklescan for safety checks on pickle files, including those in PyTorch models. The vulnerability enables potential supply chain attacks by distributing infected pickle files across machine learning models and Python objects.