Fredericdt

**Name of the Vulnerable Software and Affected Versions** picklescan versions 0.0.26 and earlier **Description** The software fails to detect the `ensurepip. run pip` built-in function when scanning pickle files. Attackers can craft malicious pickle files by embedding calls to `ensurepip. run pip` within ` reduce ` methods, allowing them to bypass detection. When a user invokes `pickle.load()` on such a file after it has been incorrectly flagged as safe, it can lead to remote code execution. This issue impacts organizations or individuals using the tool to detect malicious pickle files within PyTorch models, potentially enabling supply chain attacks through infected ML models, APIs, or saved Python objects. **Recommendations** Update to version 0.0.30 or later.

**Name of the Vulnerable Software and Affected Versions** picklescan versions prior to 0.0.29 **Description** An issue exists where the software fails to detect malicious pickle files that utilize the `get entity()` function within the `idlelib.autocomplete.AutoComplete` module in reduce methods. This allows attackers to embed undetected code in pickle files that executes arbitrary commands when loaded by victims using the `pickle.load()` function. This can lead to remote code execution, potentially affecting organizations or individuals using the tool to scan PyTorch models, APIs, or saved Python objects. **Recommendations** Update to version 0.0.29 or later.

**Name of the Vulnerable Software and Affected Versions** picklescan versions prior to 0.0.29 **Description** The software fails to detect malicious pickle payloads that utilize the `lib2to3.pgen2.grammar.Grammar.loads` function within the `reduce` method. This flaw allows remote code execution, as attackers can craft pickle files containing dangerous code that evades detection and executes during the `pickle.load()` deserialization process. Deserialization is the process of converting a data format back into an object. **Recommendations** Update to version 0.0.29 or later.

**Name of the Vulnerable Software and Affected Versions** picklescan versions prior to 0.0.29 **Description** The software fails to detect malicious pickle files that utilize the `idlelib.calltip.get entity()` function within reduce methods. This allows attackers to embed undetected code in pickle files, which can lead to remote code execution when the files are loaded by victims. **Recommendations** Update to version 0.0.29 or later.

**Name of the Vulnerable Software and Affected Versions** picklescan versions prior to 0.0.30 **Description** The software fails to detect the `asyncio.unix events. UnixSubprocessTransport. start` function within pickle reduce methods. This allows remote code execution as attackers can create malicious pickle files containing this built-in function to bypass detection and execute arbitrary commands upon loading. **Recommendations** Update to version 0.0.30 or later.

**Name of the Vulnerable Software and Affected Versions** picklescan versions prior to 0.0.29 **Description** An issue exists where the software fails to detect the `profile.Profile.runctx()` function during the analysis of pickle files. This allows remote attackers to embed malicious code by using `profile.Profile.runctx` within the `reduce` method, which can lead to remote code execution when the crafted pickle file is loaded. **Recommendations** Update to version 0.0.29 or later.

**Name of the Vulnerable Software and Affected Versions** picklescan versions prior to 0.0.30 **Description** The software fails to detect malicious pickle files that utilize the `idlelib.pyshell.ModifiedInterpreter.runcommand` function within reduce methods. This allows attackers to embed undetected code in pickle files, which can lead to remote code execution when the files are loaded by victims. **Recommendations** Update to version 0.0.30 or later.

**Name of the Vulnerable Software and Affected Versions** picklescan versions prior to 0.0.29 **Description** The software fails to detect malicious pickle files that utilize the `fetch completions` function within `idlelib.autocomplete.AutoComplete` in reduce methods. This allows attackers to embed undetected code in pickle files, leading to arbitrary command execution when the files are loaded by victims. **Recommendations** Update to version 0.0.29 or later.

**Name of the Vulnerable Software and Affected Versions** picklescan versions prior to 0.0.29 **Description** An issue exists where the software fails to detect malicious pickle files that utilize the `SetText` function within `idlelib.debugobj.ObjectTreeItem` inside reduce methods. Attackers can craft pickle files with embedded code that bypasses detection, leading to remote code execution when `pickle.load()` is called. This can be used in supply chain attacks by distributing infected pickle files across machine learning models, APIs, or saved Python objects. **Recommendations** Update to version 0.0.29 or later.

**Name of the Vulnerable Software and Affected Versions** picklescan versions prior to 0.0.29 **Description** An issue exists where the software fails to detect malicious calls to the `fetch tip()` function within the `idlelib.calltip.Calltip` module in pickle files. This occurs because the `fetch tip()` function, a built-in Python library function, can be used in a ` reduce ` method to execute arbitrary code. An attacker can craft a payload that remains undetected during scanning, leading to remote code execution when the malicious pickle file is processed via `pickle.load()`. **Recommendations** Update to version 0.0.29 or later.

**Name of the Vulnerable Software and Affected Versions** picklescan versions prior to 0.0.30 **Description** The software fails to detect malicious pickle files that invoke `idlelib.pyshell.ModifiedInterpreter.runcode` within ` reduce ` methods. This allows attackers to embed undetected code in pickle files that executes arbitrary commands when the file is processed via the `pickle.load()` function, potentially enabling supply chain attacks on saved Python objects and PyTorch models. **Recommendations** Update to version 0.0.30.

**Name of the Vulnerable Software and Affected Versions** picklescan versions prior to 0.0.29 **Description** The software fails to detect the built-in `trace.Trace.run` function during the analysis of pickle files. This allows remote attackers to embed malicious code within the `reduce` method of a crafted pickle file. When the `pickle.load` function processes such a file, it can lead to arbitrary code execution. **Recommendations** Update to version 0.0.29 or later.

**Name of the Vulnerable Software and Affected Versions** picklescan versions prior to 0.0.30 **Description** The software fails to detect `cProfile.runctx` function calls within pickle file reduce methods. This allows attackers to bypass detection and execute arbitrary code when malicious pickle files are loaded via `pickle.load()`. **Recommendations** Update to version 0.0.30 or later.

**Name of the Vulnerable Software and Affected Versions** picklescan versions prior to 0.0.29 **Description** The software fails to detect the built-in Python `trace.Trace.runctx` function when it is used within pickle file reduce methods. This allows remote attackers to craft malicious pickle files containing `trace.Trace.runctx` payloads that bypass detection and execute arbitrary code when the `pickle.load()` function is invoked. **Recommendations** Update to version 0.0.29 or later.

**Name of the Vulnerable Software and Affected Versions** picklescan versions prior to 0.0.30 **Description** The software fails to detect `cProfile.run` function calls within pickle reduce methods. This allows remote attackers to craft malicious pickle files containing `cProfile.run` payloads that bypass detection, leading to arbitrary code execution during deserialization. **Recommendations** Update to version 0.0.30 or later.

**Name of the Vulnerable Software and Affected Versions** picklescan versions prior to 0.0.30 **Description** The software fails to detect the `doctest.debug script()` function during the analysis of pickle files. This allows remote attackers to create malicious pickle files containing calls to `doctest.debug script()` that bypass detection and execute arbitrary commands when the `pickle.load()` function is invoked. **Recommendations** Update to version 0.0.30 or later.

**Name of the Vulnerable Software and Affected Versions** picklescan versions prior to 0.0.29 **Description** The software fails to detect malicious pickle files that utilize the `code.InteractiveInterpreter.runcode` function within reduce methods. This allows attackers to craft pickle payloads that bypass detection mechanisms and execute arbitrary code when processed via the `pickle.load()` function. **Recommendations** Update to version 0.0.29 or later.

**Name of the Vulnerable Software and Affected Versions** picklescan versions prior to 0.0.29 **Description** The software fails to detect the built-in Python `profile.Profile.run` function when it is utilized within pickle reduce methods. This allows remote attackers to craft malicious pickle files that bypass detection and achieve remote code execution upon deserialization. **Recommendations** Update to version 0.0.29 or later.

**Name of the Vulnerable Software and Affected Versions** picklescan versions prior to 0.0.30 **Description** The software fails to detect malicious pickle files that utilize the `runcode` function within the `idlelib.run.Executive` class inside reduce methods. This allows attackers to embed hidden code in pickle files that executes during the `pickle.load` process, potentially leading to remote code execution in PyTorch models and facilitating supply chain attacks. **Recommendations** Update to version 0.0.30 or later.

**Name of the Vulnerable Software and Affected Versions** picklescan versions prior to 0.0.30 **Description** The software fails to detect malicious pickle files that exploit the `make label()` function within `lib2to3.pgen2.pgen.ParserGenerator` inside the `reduce` method. This allows attackers to craft pickle files containing embedded code that bypasses detection and executes arbitrary commands when the `pickle.load()` function is called. **Recommendations** Update to version 0.0.30 or later.