Home
Home
Trends
Trends
Vulnerabilities
Vulnerabilities
News
News
Researchers
Researchers
Why dbugs?
Why dbugs?
Settings

Thomas Chaufein

Researcher fromTrail of Bits
#31270of 60,403
9.3Total CVSS
Vulnerabilities · 1
PT-2026-2227
2026-01-09
9.3
CVE-2026-22607
Fickling
Fickling
Fickling, a Python pickling decompiler and static analyzer, incorrectly classifies pickles utilizing the `cProfile.run()` function as SUSPICIOUS instead of OVERTLY MALICIOUS. This misclassification can lead users to execute attacker-controlled code if they rely on Fickling’s output to determine pickle safety for deserialization. This issue impacts any workflow or product using Fickling as a security gate for pickle deserialization.