Critical
CVE-2026-3490
Vulnerability archive
Understand vulnerabilities. Protect your applications.
Discover which vulnerabilities affect your technologies and how to fix them. Explore clear explanations, affected versions and practical recommendations - from CMS platforms and plugins to application libraries.
Vulnerability archive 59
Reset filters
Critical
CVE-2026-53873
PickleScan's profile.run blocklist mismatch allows exec() bypass
High
CVE-2025-71367
Picklescan is vulnerable to RCE via missing detection when calling built-in python _operator.attrgetter
High
CVE-2025-71375
Picklescan is vulnerable to RCE via missing detection when calling built-in python _operator.methodcaller
High
CVE-2025-71372
Picklescan is vulnerable to RCE via missing detection when calling numpy.f2py.crackfortran.getlincoef
Medium
CVE-2025-71347
Picklescan is vulnerable to RCE via missing detection when calling numpy.f2py.crackfortran.param_eval
High
CVE-2025-71373
Picklescan is vulnerable to RCE through missing detection when calling built-in python operator.methodcaller
High
CVE-2025-71362
Picklescan missing detection when calling numpy.f2py.crackfortran.getlincoef
High
ghsa-vqmv-47xg-9wpr
Picklescan missing detection when calling pty.spawn
Critical
CVE-2025-10157
Picklescan is Vulnerable to Unsafe Globals Check Bypass through Subclass Imports
Critical
CVE-2025-10156
Picklescan: ZIP archive scan bypass is possible through non-exhaustive Cyclic Redundancy Check
Critical
CVE-2025-10155
Picklescan Bypass is Possible via File Extension Mismatch
Medium
CVE-2025-71364
Picklescan is missing detection when calling built-in python library asyncio.unix_events._UnixSubprocessTransport._start
Medium
CVE-2025-71363
Picklescan is missing detection when calling built-in python cProfile.run
Medium
CVE-2025-71368
Picklescan is missing detection when calling built-in python doctest.debug_script
Medium
CVE-2025-71340
Picklescan is missing detection when calling built-in python idlelib.pyshell.ModifiedInterpreter.runcode
Medium
CVE-2025-71342
Picklescan is missing detection when calling built-in python idlelib.run.Executive.runcode
Medium
CVE-2025-71343
Picklescan is missing detection when calling built-in python lib2to3.pgen2.pgen.ParserGenerator.make_label
Medium
CVE-2025-71345
Picklescan is missing detection when calling pytorch function torch.utils.bottleneck.__main__.run_autograd_prof
Medium
CVE-2025-71360
Picklescan has a missing detection when calling built-in python library idlelib.calltip.get_entity
Medium
CVE-2025-71371
Picklescan has a missing detection when calling built-in python code.InteractiveInterpreter
Medium
CVE-2025-71359
Picklescan has a missing detection when calling built-in python lib2to3.pgen2.grammar.Grammar.loads
Medium
CVE-2025-71374
Picklescan has a missing detection when calling built-in python profile.Profile.run
Medium
CVE-2025-71352
Picklescan has a missing detection when calling built-in python trace.Trace.runctx
Know which vulnerabilities affect your application
With the DockRay integration and software inventory enabled, DockRay checks reported component versions against known vulnerabilities and notifies you about confirmed matches. Coverage depends on the supported technology and available advisory data.