Vulnerabilities > Mmaitre314 > Picklescan > 0.0.10

DATE CVE VULNERABILITY TITLE RISK
2025-03-10 CVE-2025-1944 Unspecified vulnerability in Mmaitre314 Picklescan
picklescan before 0.0.23 is vulnerable to a ZIP archive manipulation attack that causes it to crash when attempting to extract and scan PyTorch model archives.
network
low complexity
mmaitre314
6.5
2025-03-10 CVE-2025-1945 Unspecified vulnerability in Mmaitre314 Picklescan
picklescan before 0.0.23 fails to detect malicious pickle files inside PyTorch model archives when certain ZIP file flag bits are modified.
network
low complexity
mmaitre314
critical
9.8