CVE-2025-71358 | picklescan up to 0.0.28 Autocomplete pickle.load deserialization (GHSA-6w4w-5w54-rjvr)

June 23, 2026 Yanac

A vulnerability marked as critical has been reported in picklescan up to 0.0.28. This affects the function pickle.load of the component Autocomplete Handler. Performing a manipulation results in deserialization.

This vulnerability is identified as CVE-2025-71358. The attack can be initiated remotely. There is not any exploit available.

It is suggested to upgrade the affected component.VulDB Recent EntriesRead More