picklescan versions before 0.0.28 fail to detect malicious function calls to torch.utils.bottleneck.__main__.run_cprofile embedded in pickle files. This allows attackers to bypass safety checks and embed undetected code that can lead to arbitrary code execution when victims load these pickle files.