Public vulnerability disclosures from Bombadil Systems. Each advisory includes technical details, affected systems, severity assessment, and remediation guidance.
Trail of Bits fickling versions through 0.1.10 do not include _posixsubprocess, site, or atexit in the UNSAFE_IMPORTS denylist. Pickle payloads invoking dangerous functions from these modules pass check_safety() as LIKELY_SAFE, enabling arbitrary code execution through fickling.load().
CVE record →In fickling versions through 0.1.11, the UnsafeImportsML pass unconditionally registers all import nodes in the shared AnalysisContext.reported_shortened_code set. MLAllowlist then receives already_reported=True for every import, skipping its allowlist check entirely. The pass becomes dead code, and check_safety() returns LIKELY_SAFE for malicious payloads.
CVE record →