picklescan before 0.0.28 fails to detect malicious pickle files that use torch.utils.data...
CVE-2025-71369
picklescan before 0.0.28 fails to detect malicious pickle files that use torch.utils.data.datapipes.utils.decoder.basich
2026-07-04 归档
今日共收录 996 条安全情报，包含 192 个 CVE，454 篇安全通告，以及 95 篇研究论文。
← 返回归档列表Picklescan before 0.0.33 fails to detect the numpy.f2py.crackfortran.getlincoef gadget in pickle...
CVE-2025-71372
Picklescan before 0.0.33 fails to detect the numpy.f2py.crackfortran.getlincoef gadget in pickle __reduce__ methods, all
An Incorrect Use of Privileged APIs vulnerability in Unity Parsec on Windows hosts leads to a...
CVE-2026-54424
An Incorrect Use of Privileged APIs vulnerability in Unity Parsec on Windows hosts leads to a potential Elevation of Pri
picklescan before 0.0.28 fails to detect malicious pickle files that exploit torch._dynamo.guards...
CVE-2025-71353
picklescan before 0.0.28 fails to detect malicious pickle files that exploit torch._dynamo.guards.GuardBuilder.get funct
picklescan before 0.0.30 fails to detect the asyncio.unix_events._UnixSubprocessTransport._start...
CVE-2025-71364
picklescan before 0.0.30 fails to detect the asyncio.unix_events._UnixSubprocessTransport._start function in pickle redu
picklescan before 0.0.33 fails to detect operator.methodcaller function calls in pickle files,...
CVE-2025-71373
picklescan before 0.0.33 fails to detect operator.methodcaller function calls in pickle files, allowing attackers to byp
picklescan before 0.0.29 fails to detect malicious pickle files using idlelib.calltip.get_entity...
CVE-2025-71360
picklescan before 0.0.29 fails to detect malicious pickle files using idlelib.calltip.get_entity function in reduce meth
The Execute Command node in n8n allows authenticated users to execute arbitrary commands on the...
CVE-2025-71380
The Execute Command node in n8n allows authenticated users to execute arbitrary commands on the host system where n8n ru
picklescan before 0.0.29 fails to detect malicious pickle payloads that utilize lib2to3.pgen2...
CVE-2025-71359
picklescan before 0.0.29 fails to detect malicious pickle payloads that utilize lib2to3.pgen2.grammar.Grammar.loads in t
picklescan before 0.0.33 fails to detect unsafe deserialization when numpy.f2py.crackfortran...
CVE-2025-71362
picklescan before 0.0.33 fails to detect unsafe deserialization when numpy.f2py.crackfortran functions call eval on arbi
picklescan before 0.0.33 fails to detect malicious pickle files using numpy.f2py.crackfortran...
CVE-2025-71347
picklescan before 0.0.33 fails to detect malicious pickle files using numpy.f2py.crackfortran.param_eval function in red
picklescan before 0.0.30 fails to detect malicious pickle files using idlelib.run.Executive...
CVE-2025-71342
picklescan before 0.0.30 fails to detect malicious pickle files using idlelib.run.Executive.runcode in reduce methods. A
picklescan before 0.0.28 fails to detect malicious torch.fx.experimental.symbolic_shapes.ShapeEnv...
CVE-2025-71356
picklescan before 0.0.28 fails to detect malicious torch.fx.experimental.symbolic_shapes.ShapeEnv.evaluate_guards_expres
picklescan before 0.0.30 fails to detect malicious pickle files that exploit lib2to3.pgen2.pgen...
CVE-2025-71343
picklescan before 0.0.30 fails to detect malicious pickle files that exploit lib2to3.pgen2.pgen.ParserGenerator.make_lab
Gitea versions before 1.26.0 do not fail closed on bufio.Scanner errors while processing pre...
CVE-2026-27780
Gitea versions before 1.26.0 do not fail closed on bufio.Scanner errors while processing pre-receive hook input, allowin
Gitea versions before 1.25.5 accept malformed or injected forwarded-proto values when detecting...
CVE-2026-27779
Gitea versions before 1.25.5 accept malformed or injected forwarded-proto values when detecting public URLs, allowing sp
Gitea versions before 1.25.5 use release tag names and asset names as filesystem path components...
CVE-2026-28705
Gitea versions before 1.25.5 use release tag names and asset names as filesystem path components when dumping release as
Gitea versions before 1.25.5 allow draft release data or attachments to be accessed without the...
CVE-2026-27660
Gitea versions before 1.25.5 allow draft release data or attachments to be accessed without the required write permissio
Gitea versions before 1.25.5 do not use the migration HTTP transport for LFS push and sync mirror...
CVE-2026-26292
Gitea versions before 1.25.5 do not use the migration HTTP transport for LFS push and sync mirror operations, bypassing
Gitea versions before 1.25.5 look up tracked-time entries by time ID without scoping the lookup...
CVE-2026-25782
Gitea versions before 1.25.5 look up tracked-time entries by time ID without scoping the lookup to the issue in the requ