{"vulnerability": "cve-2025-7134", "sightings": [{"uuid": "878a79ad-887c-4843-b94d-e5b55598fd21", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-7134", "type": "seen", "source": "MISP/853ff921-86fb-463b-bc2a-2860bf336b81", "content": "", "creation_timestamp": "2025-08-06T01:04:20.000000Z"}, {"uuid": "9efcad82-a505-4b65-a0f1-530f7f1f7f7e", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-7134", "type": "seen", "source": "MISP/853ff921-86fb-463b-bc2a-2860bf336b81", "content": "", "creation_timestamp": "2025-08-21T10:03:53.000000Z"}, {"uuid": "095fbc15-1cd6-43f9-95e9-3cd57ab30e6e", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-71348", "type": "seen", "source": "https://bsky.app/profile/postac001.bsky.social/post/3mosrzrpvn52y", "content": "picklescan 0.0.28 \u672a\u6e80\u3067\u3001reduce \u30e1\u30bd\u30c3\u30c9\u5185\u306e torch.utils._config_module.load_config \u95a2\u6570\u3092\u60aa\u7528\u3057\u3001\u4efb\u610f\u306e\u30b3\u30fc\u30c9\u5b9f\u884c\u3092\u53ef\u80fd\u306b\u3059\u308b\u60aa\u610f\u306e\u2026\nCVE-2025-71348 CVSS 8.1 | HIGH", "creation_timestamp": "2026-06-21T16:27:12.554338Z"}, {"uuid": "7b0f9c90-bee0-47a9-8853-5c77d5aa3e41", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-71348", "type": "seen", "source": "https://bsky.app/profile/cve.skyfleet.blue/post/3mosuo6f7cg2k", "content": "CVE-2025-71348 - picklescan - Arbitrary Code Execution via torch.utils._config_module.load_config Bypass\nCVE ID : CVE-2025-71348\n \n Published : June 21, 2026, 1:26 p.m. | 3\u00a0hours, 43\u00a0minutes ago\n \n Description : picklescan before 0.0.28 fails to detect malicious pickle files t...", "creation_timestamp": "2026-06-21T17:14:24.405278Z"}, {"uuid": "a3e7b22e-769c-45f8-b7b8-69e089916208", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-71348", "type": "seen", "source": "https://bsky.app/profile/cybersecinsight.bsky.social/post/3moush6g2fm2y", "content": "\ud83d\udd0d Vulnerability Spotlight | Part 2/3\n\n\u26a0\ufe0f CVE-2025-71348\n\npicklescan before 0.0.28 fails to detect malicious pickle files that invoke torch.utils._config_module.load_config function within reduce methods. ...", "creation_timestamp": "2026-06-22T11:40:01.582405Z"}, {"uuid": "2bd1e999-686a-4fe3-a5ca-e18b546087ef", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-71344", "type": "seen", "source": "https://bsky.app/profile/cve.skyfleet.blue/post/3mow4mez25i2q", "content": "CVE-2025-71344 - picklescan - Arbitrary Code Execution via Undetected ensurepip._run_pip Function\nCVE ID : CVE-2025-71344\n \n Published : June 22, 2026, 9:04 p.m. | 2\u00a0hours, 5\u00a0minutes ago\n \n Description : picklescan before 0.0.30 (affected versions 0.0.26 and earlier) fails to ...", "creation_timestamp": "2026-06-23T00:14:33.286629Z"}, {"uuid": "feb66fb3-d518-41e2-b720-e3e6020dacc8", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "86ecb4e1-bb32-44d5-9f39-8a4673af8385", "vulnerability": "CVE-2025-71344", "type": "published-proof-of-concept", "source": "https://github.com/advisories/GHSA-xp4f-hrf8-rxw7", "content": "", "creation_timestamp": "2025-08-26T21:34:37.000000Z"}, {"uuid": "0608c5fa-b9a0-4503-b0a2-3bad90f37444", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-71341", "type": "seen", "source": "https://bsky.app/profile/cve.skyfleet.blue/post/3moxkqcdnog2l", "content": "CVE-2025-71341 - picklescan - Remote Code Execution via Undetected profile.Profile.runctx\nCVE ID : CVE-2025-71341\n \n Published : 23 juin 2026 12:12 | 1\u00a0heure, 30\u00a0minutes ago\n \n Description : picklescan before 0.0.29 fails to detect the profile.Profile.runctx function when anal...", "creation_timestamp": "2026-06-23T13:59:56.910531Z"}, {"uuid": "548be774-c876-4f99-88ed-4740e0be5936", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-71340", "type": "seen", "source": "https://bsky.app/profile/cve.skyfleet.blue/post/3mp5sef4f3q2a", "content": "CVE-2025-71340 - picklescan - Remote Code Execution via idlelib.pyshell.ModifiedInterpreter.runcode\nCVE ID : CVE-2025-71340\n \n Published : June 25, 2026, 9:41 p.m. | 3\u00a0hours, 30\u00a0minutes ago\n \n Description : picklescan through 0.0.26 fails to detect malicious pickle files that ...", "creation_timestamp": "2026-06-26T01:32:25.472654Z"}, {"uuid": "392536e3-b534-4b5d-8b69-43a13b865015", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-71343", "type": "seen", "source": "https://bsky.app/profile/cve.skyfleet.blue/post/3mps7arpltr27", "content": "CVE-2025-71343 - picklescan - Arbitrary Code Execution via lib2to3.pgen2.pgen.ParserGenerator.make_label Detection Bypass\nCVE ID : CVE-2025-71343\n \n Published : July 4, 2026, 1:23 a.m. | 2\u00a0hours, 23\u00a0minutes ago\n \n Description : picklescan before 0.0.30 fails to detect maliciou...", "creation_timestamp": "2026-07-04T04:16:17.981495Z"}, {"uuid": "002d2f17-c7a2-4bcf-bf4f-e6e48ca41a8a", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-71342", "type": "seen", "source": "https://bsky.app/profile/cve.skyfleet.blue/post/3mps7ew4qua25", "content": "CVE-2025-71342 - picklescan - Undetected Remote Code Execution via idlelib.run.Executive.runcode\nCVE ID : CVE-2025-71342\n \n Published : July 4, 2026, 1:23 a.m. | 2\u00a0hours, 23\u00a0minutes ago\n \n Description : picklescan before 0.0.30 fails to detect malicious pickle files using idle...", "creation_timestamp": "2026-07-04T04:18:36.611362Z"}, {"uuid": "d100a544-6405-433a-b1ab-f1ebcdb0614b", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-71345", "type": "seen", "source": "https://bsky.app/profile/cve.skyfleet.blue/post/3mpsaqy7fnc2h", "content": "CVE-2025-71345 - picklescan - Arbitrary Code Execution via torch.utils.bottleneck.__main__.run_autograd_prof\nCVE ID : CVE-2025-71345\n \n Published : July 4, 2026, 1:23 a.m. | 2\u00a0hours, 23\u00a0minutes ago\n \n Description : picklescan before 0.0.30 fails to detect malicious pickle file...", "creation_timestamp": "2026-07-04T04:43:15.506936Z"}, {"uuid": "c153a390-621a-4418-ab42-4da47af1ae7d", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-71347", "type": "seen", "source": "https://bsky.app/profile/cve.skyfleet.blue/post/3mpsazwofew23", "content": "CVE-2025-71347 - picklescan - Undetected Remote Code Execution via numpy.f2py.crackfortran.param_eval\nCVE ID : CVE-2025-71347\n \n Published : July 4, 2026, 1:23 a.m. | 2\u00a0hours, 23\u00a0minutes ago\n \n Description : picklescan before 0.0.33 fails to detect malicious pickle files using...", "creation_timestamp": "2026-07-04T04:48:15.862071Z"}, {"uuid": "55ca7b56-a712-4f57-9264-7e1584856281", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-71342", "type": "seen", "source": "https://bsky.app/profile/postac001.bsky.social/post/3mpsfshclzu27", "content": "picklescan 0.0.30\u672a\u6e80\u3067\u3001PyTorch\u30e2\u30c7\u30eb\u3084\u30b5\u30d7\u30e9\u30a4\u30c1\u30a7\u30fc\u30f3\u653b\u6483\u306b\u304a\u3044\u3066\u3001pickle.load\u6642\u306b\u5b9f\u884c\u3055\u308c\u308b\u60aa\u610f\u306e\u3042\u308b\u30b3\u30fc\u30c9\u304c\u691c\u51fa\u3055\u308c\u306a\u3044\u8106\u5f31\u6027\u3002\nCVE-2025-71342 CVSS 8.1 | HIGH", "creation_timestamp": "2026-07-04T06:13:33.777026Z"}, {"uuid": "5f7f713e-84c8-4bc3-ba30-30b1d0487ae9", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-71343", "type": "seen", "source": "https://bsky.app/profile/postac001.bsky.social/post/3mpsfunjwiy2x", "content": "picklescan v0.0.30\u672a\u6e80\u306f\u3001lib2to3.pgen2.pgen.ParserGenerator.make_label\u3092\u60aa\u7528\u3059\u308b\u60aa\u610f\u3042\u308bpickle\u30d5\u30a1\u30a4\u30eb\u3092\u691c\u51fa\u3067\u304d\u306a\u3044\u3002\u653b\u6483\u8005\u306f\u4efb\u2026\nCVE-2025-71343 CVSS 8.1 | HIGH", "creation_timestamp": "2026-07-04T06:14:47.978616Z"}, {"uuid": "54bb25c3-bba9-4172-95d7-3afa43cc29a4", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-71345", "type": "seen", "source": "https://bsky.app/profile/postac001.bsky.social/post/3mpsfy7pr742g", "content": "**\u5bfe\u8c61\u306e\u88fd\u54c1\u3068\u30d0\u30fc\u30b8\u30e7\u30f3**: picklescan before 0.0.30 **\u8106\u5f31\u6027\u306e\u5185\u5bb9**: \u7279\u5b9a\u306e\u60aa\u610f\u3042\u308bpickle\u30d5\u30a1\u30a4\u30eb\u306e\u691c\u51fa\u306b\u5931\u6557\u3059\u308b **\u5f71\u97ff\u3092\u53d7\u3051\u308b\u5bfe\u8c61**: pickl\u2026\nCVE-2025-71345 CVSS 8.1 | HIGH", "creation_timestamp": "2026-07-04T06:16:47.619037Z"}, {"uuid": "bc066b94-0b54-4d5c-b62d-014def69d0d9", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-71342", "type": "seen", "source": "https://bsky.app/profile/thehackerwire.bsky.social/post/3mpt4leffij26", "content": "\ud83d\udfe0 CVE-2025-71342 - High (8.1)\n\npicklescan before 0.0.30 fails to detect malicious pickle files using idlelib.run.Executive.runco...\n\nhttps://www.thehackerwire.com/vulnerability/CVE-2025-71342/\n\n#infosec #cybersecurity #CVE #vulnerability #security #patchstack", "creation_timestamp": "2026-07-04T13:01:11.992522Z"}, {"uuid": "1766fb89-efe7-4dcd-8d95-b39bf02f4edb", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-71343", "type": "seen", "source": "https://bsky.app/profile/thehackerwire.bsky.social/post/3mptdbznawx2o", "content": "\ud83d\udfe0 CVE-2025-71343 - High (8.1)\n\npicklescan before 0.0.30 fails to detect malicious pickle files that exploit lib2to3.pgen2.pgen.P...\n\nhttps://www.thehackerwire.com/vulnerability/CVE-2025-71343/\n\n#infosec #cybersecurity #CVE #vulnerability #security #patchstack", "creation_timestamp": "2026-07-04T15:01:15.029394Z"}, {"uuid": "80abc5fd-052e-4026-ade7-57c35806cee3", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-71345", "type": "seen", "source": "https://bsky.app/profile/thehackerwire.bsky.social/post/3mptdcadalr2g", "content": "\ud83d\udfe0 CVE-2025-71345 - High (8.1)\n\npicklescan before 0.0.30 fails to detect malicious pickle files that invoke torch.utils.bottlenec...\n\nhttps://www.thehackerwire.com/vulnerability/CVE-2025-71345/\n\n#infosec #cybersecurity #CVE #vulnerability #security #patchstack", "creation_timestamp": "2026-07-04T15:01:21.897044Z"}, {"uuid": "8792ad5f-db84-4a94-9c7b-7cc5aa6b118a", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-71347", "type": "seen", "source": "https://bsky.app/profile/thehackerwire.bsky.social/post/3mptdchflrf2v", "content": "\ud83d\udfe0 CVE-2025-71347 - High (8.1)\n\npicklescan before 0.0.33 fails to detect malicious pickle files using numpy.f2py.crackfortran.par...\n\nhttps://www.thehackerwire.com/vulnerability/CVE-2025-71347/\n\n#infosec #cybersecurity #CVE #vulnerability #security #patchstack", "creation_timestamp": "2026-07-04T15:01:29.454089Z"}]}