Description

Fickling is a Python pickling decompiler and static analyzer. Prior to version 0.1.7, Fickling is vulnerable to detection bypass due to "builtins" blindness. This issue has been patched in version 0.1.7.

Related CPE's

a

trailofbits

fickling

*

*

*

*

*

python

Vulnerable

References

https://github.com/trailofbits/fickling/commit/9f309ab834797f280cb5143a2f6f987579fa7cdf

Patch

https://github.com/trailofbits/fickling/releases/tag/v0.1.7

Release Notes

https://github.com/trailofbits/fickling/security/advisories/GHSA-h4rm-mm56-xf63

Vendor Advisory

https://github.com/trailofbits/fickling/security/advisories/GHSA-h4rm-mm56-xf63

Vendor Advisory

Weaknesses

[email protected]

Secondary
CWE-502

CVSS impact metrics

CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H

7.8 · High

Information

Source identifier

[email protected]

Vulnerability status

Analyzed

Published

2026-01-10T02:15:50.187Z

6 days ago

Last modified

2026-01-16T18:56:30.137Z

2 hours ago