Security Advisory
CVE-2025-71375
8.1
HIGH
Vulnerability Description
picklescan before 0.0.34 fails to detect the _operator.methodcaller built-in function when scanning pickle files for malicious code. Attackers can craft malicious pickle payloads using _operator.methodcaller that evade detection and execute arbitrary code when loaded by pickle.load().
Published Date
July 4, 2026
Official Source
NIST NVD Advisory