CVE-2025-71372 | Picklescan up to 0.0.32 numpy.f2py reduce deserialization (GHSA-rrxm-2pvv-m66x / EUVD-2025-210423)

July 4, 2026 Yanac

A vulnerability marked as critical has been reported in Picklescan up to 0.0.32. This vulnerability affects the function __reduce__ of the file numpy.f2py. The manipulation leads to deserialization.

This vulnerability is uniquely identified as CVE-2025-71372. The attack is possible to be carried out remotely. No exploit exists.

It is suggested to upgrade the affected component.VulDB Recent EntriesRead More