Threats tagged 'ghsa-mq7r-vm99-p7vx'

picklescan versions through 0.0.26 fail to detect malicious pickle files that invoke idlelib.pyshell.ModifiedInterpreter.runcode in __reduce__ methods. This allows attackers to embed undetected code in pickle files that execute arbitrary commands when loaded via pickle.load(), enabling supply chain attacks on PyTorch models and saved Python objects. The issue is fixed in version 0.0.30.