CVE-2025-71367

Name of the Vulnerable Software and Affected Versions picklescan versions prior to 0.0.34

Description The software fails to detect operator.attrgetter function calls within pickle payloads, which allows security checks to be bypassed. Remote attackers can create malicious pickle files utilizing operator.attrgetter in reduce methods to achieve remote code execution when the pickle.load() function processes the file.

Recommendations Update to version 0.0.34 or later.