Threats tagged 'ghsa-gphx-c88f-73gw'

Picklescan versions before 0.0.28 fail to detect malicious pickle files that exploit torch.utils.data.datapipes.utils.decoder.basichandlers in reduce methods. This allows attackers to bypass safety checks and embed malicious code that executes during deserialization, enabling remote code execution.