CVE-2025-71347

Name of the Vulnerable Software and Affected Versions picklescan versions prior to 0.0.33

Description The software fails to detect malicious pickle files that utilize the numpy.f2py.crackfortran.param eval() function within reduce methods. This flaw allows attackers to bypass security checks by embedding undetected code in pickle files. When an application loads untrusted pickle data, the embedded code executes during deserialization, leading to arbitrary code execution.

Recommendations Update to version 0.0.33 or later.