Threats Tagged 'ghsa-g38g-8gr9-h9xp'
View all threats tagged with 'ghsa-g38g-8gr9-h9xp'. Filter and sort to focus on specific types of threats.
Stop chasing alerts. Route them.
Start free, then upgrade once to turn Radar into an automated delivery engine for your security stack.
Custom feeds / Automations: email, Slack, webhooks, SIEM/MISP / API access (baseline limits)
API access activates after upgrading in Console -> Billing.
Check if your credentials are on the dark web
Instant breach scanning across billions of leaked records. Free tier available.
Filter Threats
Narrow down the results by type, severity, or affected countries
Threats Tagged 'ghsa-g38g-8gr9-h9xp'
Click on any threat for detailed analysis and mitigation recommendations
0 PickleScan version 1.0.3 and earlier do not block several Python standard library modules that enable direct remote code execution (RCE) when malicious pickle files import them. These modules include uuid, _osx_support, _aix_support, _pyrepl, imaplib, and test.support.script_helper. Malicious pickle files using these modules pass PickleScan's safety checks with zero issues detected, allowing arbitrary command execution upon unpickling. This affects all deployments relying on PickleScan, including the HuggingFace Hub. A fix is available to update the blocklist, but the vendor recommends architectural changes to use a default-deny allowlist approach instead. Join the discussion | GCVE Database | 03/03/2026, 20:05:26 UTC Added: 09/24/2026, 06:09:29 UTC |
Showing 1 to 1 of 1 result