| PYSEC-2026-2149CVE-2026-14534 · GHSA-M6FH-58R7-X697 |
ficklingExploit Intelligence/exploit-intelligence-tech-preview/vulnerability-analysis-rhel9 |
PyPIRed Hat |
High
|
Fix reported |
|
| PYSEC-2026-2150CVE-2026-14535 · GHSA-CFFV-GRGG-G429 |
ficklingExploit Intelligence/exploit-intelligence-tech-preview/vulnerability-analysis-rhel9 |
PyPIRed Hat |
Critical
|
Fix reported |
|
| Fickling Blocklist Bypass: cProfile.run()CVE-2026-22607 · GHSA-P523-JQ9W-64X9Version ranges need review. |
fickling |
PyPI |
High
|
Fix reported |
|
| Fickling vulnerable to detection bypass due to "builtins" blindnessCVE-2026-22612 · GHSA-H4RM-MM56-XF63Version ranges need review. |
fickling |
PyPI |
High
|
Fix reported |
|
| Fickling has Static Analysis Bypass via Incomplete Dangerous Module BlocklistCVE-2026-22609 · GHSA-Q5QQ-MVFM-J35XVersion ranges need review. |
fickling |
PyPI |
High
|
Fix reported |
|
| Fickling vulnerable to use of ctypes and pydoc gadget chain to bypass detectionCVE-2026-22608 · GHSA-5HVC-6WX8-MVV4Version ranges need review. |
fickling |
PyPI |
High
|
Fix reported |
|
| Fickling has missing detection for marshal.loads and types.FunctionType in unsafe modules listCVE-2025-67747 · GHSA-565G-HWWR-4PP3Version ranges need review. |
fickling |
PyPI |
High
|
Fix reported |
|
| Fickling has a bypass via runpy.run_path() and runpy.run_module()CVE-2026-22606 · GHSA-WFQ2-52F7-7QVJVersion ranges need review. |
fickling |
PyPI |
High
|
Fix reported |
|
| Fickling has Code Injection vulnerability via pty.spawn()CVE-2025-67748 · GHSA-R7V6-MFHQ-G3M2Version ranges need review. |
fickling |
PyPI |
High
|
Fix reported |
|
| fickling's `platform` module subprocess invocation evades `check_safety()` with `LIKELY_SAFE`GHSA-5CXW-W2XG-2M8H |
fickling |
PyPI |
Medium
|
Fix reported |
|
| fickling modules linecache, difflib and gc are missing from the unsafe modules blocklistGHSA-R48F-3986-4F9C |
fickling |
PyPI |
Medium
|
Fix reported |
|
| Fickling has `always_check_safety()` bypass: pickle.loads and _pickle.loads remain unhookedGHSA-WCCX-J62J-R448 |
fickling |
PyPI |
High
|
Fix reported |
|
| Fickling missing RCE-capable modules in UNSAFE_IMPORTSGHSA-5HWF-RC88-82XM |
fickling |
PyPI |
High
|
Fix reported |
|
| Fickling has safety check bypass via REDUCE+BUILD opcode sequenceGHSA-MHC9-48GJ-9GP3 |
fickling |
PyPI |
Medium
|
Fix reported |
|
| Fickling: OBJ opcode call invisibility bypasses all safety checksGHSA-MXHJ-88FX-4PCV |
fickling |
PyPI |
High
|
Fix reported |
|
| Fickling has a detection bypass via stdlib network-protocol constructorsGHSA-83PF-V6QQ-PWMR |
fickling |
PyPI |
Low
|
Fix reported |
|
