{"data":{"id":"3c209be9-1262-42af-b4eb-1df6ad102711","title":"CVE-2025-10155: An Improper Input Validation vulnerability in the scanning logic of mmaitre314 picklescan versions up to and including…","summary":"CVE-2025-10155 is an Improper Input Validation flaw (CWE-20) in the scanning logic of mmaitre314 picklescan, versions up to and including 0.0.30. A remote attacker can supply a standard pickle file with a PyTorch-related file extension to bypass picklescan's security checks. If the file is loaded, it can lead to execution of malicious code. JFrog rates it CVSS 4.0 9.3 CRITICAL, and NVD has not yet provided an assessment.","solution":"N/A -- no mitigation discussed in source.","labels":["security"],"sourceUrl":"https://nvd.nist.gov/vuln/detail/CVE-2025-10155","publishedAt":"2025-09-17T14:15:36.913Z","cveId":"CVE-2025-10155","cweIds":["CWE-20"],"cvssScore":"7.8","cvssSeverity":"high","severity":"high","attackType":["supply_chain"],"issueType":"vulnerability","affectedPackages":["picklescan@<= 0.0.30 (fixed: 0.0.31)"],"affectedPackageNames":["picklescan"],"affectedPackageRefs":["pypi:picklescan"],"affectedVendors":[],"affectedVendorsRaw":["picklescan","PyTorch"],"classifierModel":"claude-haiku-5-5","classifierPromptVersion":"v4","summaryPromptVersion":"v2","headline":"picklescan improper input validation lets pickle files bypass security checks","headlinePromptVersion":"h1","cvssVector":null,"attackVector":null,"attackComplexity":null,"privilegesRequired":null,"userInteraction":null,"exploitMaturity":"unknown","epssScore":0.00847,"epssCheckedAt":"2026-11-04T06:10:14.105Z","kevDateAdded":null,"advisoryAliases":["GHSA-jgw4-cr84-mqxg"],"affectedPackagesSource":"ghsa","affectedPackagesCheckedAt":"2026-10-10T03:52:43.918Z","patchAvailable":true,"disclosureDate":null,"fixReleasedAt":"2025-09-08T22:11:26.742Z","daysToFix":-9,"fixCheckedAt":"2026-10-29T21:43:45.056Z","capecIds":null,"crossRefCount":0,"attackSophistication":"trivial","impactType":["confidentiality","integrity","availability"],"aiComponentTargeted":"framework","llmSpecific":false,"classifierConfidence":0.9,"researchCategory":null,"atlasIds":["AML.T0010"],"fixes":[{"ecosystem":"pypi","name":"picklescan","fixedVersion":"0.0.31","matchedVersion":"0.0.31","fixReleasedAt":"2025-09-08T22:11:26.742Z","daysToFix":-9,"match":"ecosystem","source":"registry","status":"found","checkedAt":"2026-10-29T21:43:44.902Z"}]}}