GHSA-7wx9-6375-f5wh: PickleScan's profile.run blocklist mismatch allows exec() bypass

March 3, 2026 (updated June 18, 2026)

picklescan v1.0.3 blocks profile.Profile.run and profile.Profile.runctx but does NOT block the module-level profile.run() function. A malicious pickle calling profile.run(statement) achieves arbitrary code execution via exec() while picklescan reports 0 issues. This is because the blocklist entry "Profile.run" does not match the pickle global name "run".

References

github.com/advisories/GHSA-7wx9-6375-f5wh
github.com/mmaitre314/picklescan/security/advisories/GHSA-7wx9-6375-f5wh
nvd.nist.gov/vuln/detail/CVE-2026-53873
www.vulncheck.com/advisories/picklescan-arbitrary-code-execution-via-profile-run-blocklist-bypass

Code Behaviors & Features

Detect and mitigate GHSA-7wx9-6375-f5wh with GitLab Dependency Scanning

Secure your software supply chain by verifying that all open source dependencies used in your projects contain no disclosed vulnerabilities. Dependency Scanning using SBOM also detects vulnerabilities from proprietary advisories that this site does not include. Learn more about Dependency Scanning using SBOM →