Skip to content
Submit incident
Organization/organizations/picklescan

PickleScan

5
Records
2025
Years covered
1
Category

Incident records5

Dec 2025Three critical vulnerabilities in PickleScan bypass malware detectionConfirmedSecurity and cyberattacksInfosecurity MagazineJFrogMar 2025PickleScan crashes on manipulated ZIP archives while PyTorch loads themConfirmedSecurity and cyberattacksgithub.comsonatype.comMar 2025Zip Flag Bit Exploit Bypasses PickleScan Security ChecksConfirmedSecurity and cyberattacksgithub.comsonatype.comMar 2025Picklescan fails to detect pickle files with non-standard extensionsConfirmedSecurity and cyberattackssonatype.comFeb 2025Picklescan fails to flag pip.main() as unsafe, allowing RCE bypassConfirmedSecurity and cyberattacksgithub.comsonatype.com