Browse CVEs

CRITICAL 9.8 CVE-2026-14535 In Trail of Bits fickling versions up to and including 0.1.11, the UnsafeImportsML analysis pass unconditionally calls AnalysisContext.shorten_code(n… Fickling after 0.1.11 Fix from $2,3002026-07-04 HIGH 8.8 CVE-2026-14534 Trail of Bits fickling versions up to and including 0.1.10 do not include the Python standard library modules _posixsubprocess, site, and atexit in t… Fickling after 0.1.10 Fix from $1,9502026-07-04 HIGH 7.5 CVE-2026-33753 rfc3161-client is a Python library implementing the Time-Stamp Protocol (TSP) described in RFC 3161. Prior to 1.0.6, an Authorization Bypass vulnerab… Rfc3161 Client 1.0.6+ Fix from $1,9502026-04-08 HIGH 7.8 CVE-2026-22609 Fickling is a Python pickling decompiler and static analyzer. Prior to version 0.1.7, the unsafe_imports() method in Fickling's static analyzer fails… Fickling 0.1.7+ Fix from $1,9502026-01-10 HIGH 7.8 CVE-2026-22612 Fickling is a Python pickling decompiler and static analyzer. Prior to version 0.1.7, Fickling is vulnerable to detection bypass due to "builtins" bl… Fickling 0.1.7+ Fix from $1,9502026-01-10 HIGH 7.8 CVE-2026-22606 Fickling is a Python pickling decompiler and static analyzer. Fickling versions up to and including 0.1.6 do not treat Python’s runpy module as unsaf… Fickling 0.1.7+ Fix from $1,9502026-01-10 HIGH 7.8 CVE-2026-22607 Fickling is a Python pickling decompiler and static analyzer. Fickling versions up to and including 0.1.6 do not treat Python's cProfile module as un… Fickling 0.1.7+ Fix from $1,9502026-01-10 HIGH 7.8 CVE-2026-22608 Fickling is a Python pickling decompiler and static analyzer. Prior to version 0.1.7, both ctypes and pydoc modules aren't explicitly blocked. Even o… Fickling 0.1.7+ Fix from $1,9502026-01-10 HIGH 7.8 CVE-2025-67747 Fickling is a Python pickling decompiler and static analyzer. Versions prior to 0.1.6 are missing `marshal` and `types` from the block list of unsafe… Fickling 0.1.6+ Fix from $1,9502025-12-16 HIGH 7.8 CVE-2025-67748 Fickling is a Python pickling decompiler and static analyzer. Versions prior to 0.1.6 had a bypass caused by `pty` missing from the block list of uns… Fickling 0.1.6+ Fix from $1,9502025-12-16 HIGH 7.5 CVE-2023-40012 uthenticode is a small cross-platform library for partially verifying Authenticode digital signatures. Versions of uthenticode prior to the 2.x serie… Uthenticode 2.0.0+ Fix from $1,9502023-08-09 CRITICAL 9.8 CVE-2023-39969 uthenticode is a small cross-platform library for partially verifying Authenticode digital signatures. Version 1.0.9 of uthenticode hashed the entire… Uthenticode 1.0.9+ Fix from $2,3002023-08-09