CVE-2025-71378 | picklescan up to 0.0.29 pickle.load deserialization (GHSA-9w88-8rmg-7g2p)

June 21, 2026 Yanac

A vulnerability labeled as critical has been found in picklescan up to 0.0.29. The affected element is the function pickle.load. Such manipulation leads to deserialization.

This vulnerability is referenced as CVE-2025-71378. It is possible to launch the attack remotely. No exploit is available.

The affected component should be upgraded.VulDB Recent EntriesRead More