CVE-2025-71369

Name of the Vulnerable Software and Affected Versions picklescan versions prior to 0.0.28

Description The software fails to detect malicious pickle files that utilize torch.utils.data.datapipes.utils.decoder.basichandlers within reduce methods. This flaw allows attackers to bypass safety checks by embedding malicious code in pickle files, which then executes during deserialization, leading to remote code execution.

Recommendations Update to version 0.0.28 or later.