← Database

CVE-2025-46417

HIGH CVSS: 7.5 Published: 2025-04-24 Modified: 2026-06-17

Description

The unsafe globals in Picklescan before 0.0.25 do not include ssl. Consequently, ssl.get_server_certificate can exfiltrate data via DNS after deserialization.

Affected Platforms

Mmaitre314 Picklescan

Weakness Type

CWE-184

References