Alta
CVE-2026-22609
Archivo de vulnerabilidades
Conoce las vulnerabilidades. Protege tus aplicaciones.
Descubre qué vulnerabilidades afectan a tus tecnologías y cómo solucionarlas. Encuentra explicaciones claras, versiones afectadas y recomendaciones prácticas - desde CMS y plugins hasta bibliotecas de aplicaciones.
Archivo de vulnerabilidades 18
Restablecer filtros
Alta
CVE-2026-22606
Fickling has a bypass via runpy.run_path() and runpy.run_module()
Alta
CVE-2026-22607
Fickling Blocklist Bypass: cProfile.run()
Alta
CVE-2026-22608
Fickling vulnerable to use of ctypes and pydoc gadget chain to bypass detection
Alta
CVE-2026-22612
Fickling vulnerable to detection bypass due to "builtins" blindness
Alta
CVE-2025-71322
Picklescan Bypasses Unsafe Globals Check using pty.spawn
Alta
CVE-2025-67747
Fickling has missing detection for marshal.loads and types.FunctionType in unsafe modules list
Crítica
CVE-2026-14535
In Trail of Bits fickling versions up to and including 0.1.11, the UnsafeImportsML analysis pass unconditionally calls AnalysisContext.shorten_code(node) on every import node it inspects, regardless o
Alta
CVE-2026-14534
Trail of Bits fickling versions up to and including 0.1.10 do not include the Python standard library modules _posixsubprocess, site, and atexit in the UNSAFE_IMPORTS denylist (fickle.py). Because the
Media
ghsa-5cxw-w2xg-2m8h
fickling's `platform` module subprocess invocation evades `check_safety()` with `LIKELY_SAFE`
Media
ghsa-r48f-3986-4f9c
fickling modules linecache, difflib and gc are missing from the unsafe modules blocklist
Alta
ghsa-5hwf-rc88-82xm
Fickling missing RCE-capable modules in UNSAFE_IMPORTS
Alta
ghsa-wccx-j62j-r448
Fickling has `always_check_safety()` bypass: pickle.loads and _pickle.loads remain unhooked
Crítica
CVE-2026-3490
PickleScan's pkgutil.resolve_name has a universal blocklist bypass
Media
ghsa-mhc9-48gj-9gp3
Fickling has safety check bypass via REDUCE+BUILD opcode sequence
Alta
ghsa-mxhj-88fx-4pcv
Fickling: OBJ opcode call invisibility bypasses all safety checks
Baja
ghsa-83pf-v6qq-pwmr
Fickling has a detection bypass via stdlib network-protocol constructors
Alta
CVE-2025-67748
Fickling has Code Injection vulnerability via pty.spawn()
Identifica las vulnerabilidades de tu aplicación
Con la integración de DockRay y el inventario de software activado, DockRay compara las versiones notificadas de los componentes con las vulnerabilidades conocidas y avisa de las coincidencias confirmadas. La cobertura depende de la tecnología compatible y de los avisos disponibles.