CVE-2025-71340 | picklescan up to 0.0.26/0.0.29 pickle.load deserialization (GHSA-3gf5-cxq9-w223)

June 26, 2026 Yanac

A vulnerability was found in picklescan up to 0.0.26/0.0.29. It has been classified as critical. Affected is the function pickle.load. Performing a manipulation results in deserialization.

This vulnerability was named CVE-2025-71340. The attack may be initiated remotely. There is no available exploit.

Upgrading the affected component is recommended.VulDB Recent EntriesRead More