Threats tagged 'ghsa-g38g-8gr9-h9xp'

PickleScan version 1.0.3 and earlier do not block several Python standard library modules that enable direct remote code execution (RCE) when malicious pickle files import them. These modules include uuid, _osx_support, _aix_support, _pyrepl, imaplib, and test.support.script_helper. Malicious pickle files using these modules pass PickleScan's safety checks with zero issues detected, allowing arbitrary command execution upon unpickling. This affects all deployments relying on PickleScan, including the HuggingFace Hub. A fix is available to update the blocklist, but the vendor recommends architectural changes to use a default-deny allowlist approach instead.