CVE-2026-22612

Katalog CVE

CVSS 7.8 · High EPSS 0,32%

Kerentanan Deserialization of Untrusted Data pada trailofbits fickling. Skor CVSS 3.1 7.8 (High) menurut NVD.

Deskripsi (NVD)

Fickling is a Python pickling decompiler and static analyzer. Prior to version 0.1.7, Fickling is vulnerable to detection bypass due to "builtins" blindness. This issue has been patched in version 0.1.7.

Rincian

Terbit di NVD

10 Januari 2026

Terakhir diubah

17 Juni 2026

Status NVD

Analyzed

CVSS 3.1

7.8 (High), sumber NVD
CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H · uraikan di kalkulator

Jenis kelemahan (CWE)

CWE-502: Deserialization of Untrusted Data

EPSS (30 hari)

0,32% peluang dieksploitasi; lebih tinggi dari 23,2% CVE lain

Produk dan versi terdampak

> Data dari konfigurasi CPE di NVD.

Referensi dan perbaikan

• https://github.com/trailofbits/fickling/security/advisories/GHSA-h4rm-mm56-xf63 advisory vendor
• https://github.com/trailofbits/fickling/commit/9f309ab834797f280cb5143a2f6f987579fa7cdf patch
• https://github.com/trailofbits/fickling/releases/tag/v0.1.7 release notes