PyPI/fickling

Fickling has missing detection for marshal.loads and types.FunctionType in unsafe modules list

Modified: 7/7/2026

fickling's `platform` module subprocess invocation evades `check_safety()` with `LIKELY_SAFE`

Modified: 3/14/2026

Fickling vulnerable to use of ctypes and pydoc gadget chain to bypass detection

Modified: 7/7/2026

Fickling missing RCE-capable modules in UNSAFE_IMPORTS

Modified: 3/4/2026

Fickling has a detection bypass via stdlib network-protocol constructors

Modified: 2/23/2026

Fickling vulnerable to detection bypass due to "builtins" blindness

Modified: 7/7/2026

Fickling has safety check bypass via REDUCE+BUILD opcode sequence

Modified: 2/25/2026

Fickling: OBJ opcode call invisibility bypasses all safety checks

Modified: 2/24/2026

Fickling Blocklist Bypass: cProfile.run()

Modified: 7/7/2026

Fickling has Static Analysis Bypass via Incomplete Dangerous Module Blocklist

Modified: 7/7/2026

fickling modules linecache, difflib and gc are missing from the unsafe modules blocklist

Modified: 3/13/2026

Fickling has Code Injection vulnerability via pty.spawn()

Modified: 6/5/2026

Fickling has `always_check_safety()` bypass: pickle.loads and _pickle.loads remain unhooked

Modified: 3/4/2026

Fickling has a bypass via runpy.run_path() and runpy.run_module()

Modified: 7/7/2026

Modified: 5/20/2026

Fickling has missing detection for marshal.loads and types.FunctionType in unsafe modules list

Modified: 7/7/2026

Fickling vulnerable to use of ctypes and pydoc gadget chain to bypass detection

Modified: 7/7/2026

Fickling vulnerable to detection bypass due to "builtins" blindness

Modified: 7/7/2026

Fickling Blocklist Bypass: cProfile.run()

Modified: 7/7/2026

Fickling has Static Analysis Bypass via Incomplete Dangerous Module Blocklist

Modified: 7/7/2026

Fickling has a bypass via runpy.run_path() and runpy.run_module()

Modified: 7/7/2026

Modified: 7/13/2026

Modified: 7/13/2026