picklescan versions before 0.0.34 do not detect _operator.attrgetter function calls in pickle payloads. This allows attackers to craft malicious pickle files that use _operator.attrgetter in reduce methods to bypass security checks and execute arbitrary code during pickle.load().