picklescan@0.0.22 vulnerabilities

Security scanner detecting Python Pickle files performing suspicious actions

latest version

0.0.26

latest non vulnerable version

first published

2 years ago

latest version published

12 days ago

licenses detected

MIT
[0,)

View picklescan package health on Snyk Advisor (opens in a new tab)

Go back to all versions of this package

Report a new vulnerability Found a mistake?

Direct Vulnerabilities

Known vulnerabilities in the picklescan package. This does not include vulnerabilities belonging to this package’s dependencies.

How to fix?

Automatically find and fix vulnerabilities affecting your projects. Snyk scans for vulnerabilities and provides fixes for free.

Vulnerability	Vulnerable Version
M Incomplete List of Disallowed Inputs picklescan is a Security scanner detecting Python Pickle files performing suspicious actions Affected versions of this package are vulnerable to Incomplete List of Disallowed Inputs in `scanner.py`, which does not include `timeit` or other modules that can be leveraged for unintended command execution. An attacker can cause `exec()` to be invoked from inside a malicious pickle object by calling `timeit.timeit()`, and then convincing a user to execute the apparently non-dangerous payload after it passes a scan. How to fix Incomplete List of Disallowed Inputs? Upgrade `picklescan` to version 0.0.25 or higher.	[,0.0.25)
M Deserialization of Untrusted Data picklescan is a Security scanner detecting Python Pickle files performing suspicious actions Affected versions of this package are vulnerable to Deserialization of Untrusted Data in `scanner.py`, which does not include `numpy.testing._private.utils` or other modules that can be leveraged for unintended command execution. An attacker can cause `exec()` to be invoked from inside a malicious pickle object by calling `runstring` in it, and then convincing a user to execute the apparently non-dangerous payload after it passes a scan. How to fix Deserialization of Untrusted Data? Upgrade `picklescan` to version 0.0.25 or higher.	[,0.0.25)
H Incomplete List of Disallowed Inputs picklescan is a Security scanner detecting Python Pickle files performing suspicious actions Affected versions of this package are vulnerable to Incomplete List of Disallowed Inputs in `scanner.py`, which does not include `ssl` or other modules that can be leveraged for remote operations. An attacker can read and exfiltrate sensitive local file content by constructing a malicious domain name and triggering a DNS resolution. The DNS resolution is performed after deserializaition and may call `ssl.get_server_certificate()`, which bypasses protections. How to fix Incomplete List of Disallowed Inputs? Upgrade `picklescan` to version 0.0.25 or higher.	[,0.0.25)
M Insufficient Verification of Data Authenticity picklescan is a Security scanner detecting Python Pickle files performing suspicious actions Affected versions of this package are vulnerable to Insufficient Verification of Data Authenticity when PickleScan attempts to extract and scan PyTorch model archives, an attacker can manipulate the `ZIP` file by modifying the filename in the `ZIP` header while retaining the original filename in the directory listing. This causes PickleScan to raise a `BadZipFile` error, preventing proper scanning, while PyTorch's more lenient `ZIP` handling still allows the model to load, enabling malicious payloads to bypass detection. How to fix Insufficient Verification of Data Authenticity? Upgrade `picklescan` to version 0.0.23 or higher.	[,0.0.23)
M Insufficient Verification of Data Authenticity picklescan is a Security scanner detecting Python Pickle files performing suspicious actions Affected versions of this package are vulnerable to Insufficient Verification of Data Authenticity due to improper handling of modified `ZIP` file flag bits. Attackers can exploit this by altering specific bits in the `ZIP` file headers within PyTorch model archives, embedding malicious pickle files that remain undetected by PickleScan while still being successfully loaded by PyTorch's `torch.load()`. How to fix Insufficient Verification of Data Authenticity? Upgrade `picklescan` to version 0.0.23 or higher.	[,0.0.23)

Go back to all versions of this package