{"vulnerability": "cve-2025-7135", "sightings": [{"uuid": "10795c7b-90fa-42dd-aef4-c97ba3a85afe", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-7135", "type": "seen", "source": "MISP/853ff921-86fb-463b-bc2a-2860bf336b81", "content": "", "creation_timestamp": "2025-08-06T01:04:20.000000Z"}, {"uuid": "219317ac-b0eb-4d25-9a92-0e8a37b4a4c3", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-7135", "type": "seen", "source": "MISP/853ff921-86fb-463b-bc2a-2860bf336b81", "content": "", "creation_timestamp": "2025-08-21T10:03:53.000000Z"}, {"uuid": "edbfae04-7e4f-4de1-bd11-95ba843281a0", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-71357", "type": "seen", "source": "https://bsky.app/profile/postac001.bsky.social/post/3moss4gcist27", "content": "picklescan 0.0.30\u672a\u6e80\u306f\u3001idlelib.pyshell.ModifiedInterpreter.runcommand \u306e reduce \u30e1\u30bd\u30c3\u30c9\u3067\u60aa\u610f\u306e\u3042\u308bpickle\u30d5\u30a1\u30a4\u30eb\u3092\u691c\u2026\nCVE-2025-71357 CVSS 8.1 | HIGH", "creation_timestamp": "2026-06-21T16:28:41.373668Z"}, {"uuid": "fe29bda4-d54e-45e7-afc1-d2599237f7f7", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-71357", "type": "seen", "source": "https://bsky.app/profile/cve.skyfleet.blue/post/3mosv6sga2a2k", "content": "CVE-2025-71357 - picklescan - Arbitrary Code Execution via Undetected idlelib.pyshell.ModifiedInterpreter.runcommand\nCVE ID : CVE-2025-71357\n \n Published : June 21, 2026, 1:26 p.m. | 3\u00a0hours, 43\u00a0minutes ago\n \n Description : picklescan before 0.0.30 fails to detect malicious pi...", "creation_timestamp": "2026-06-21T17:23:42.394112Z"}, {"uuid": "ecf82f62-5432-4d07-b08c-0eced9e3d261", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-71358", "type": "seen", "source": "https://bsky.app/profile/cve.skyfleet.blue/post/3mow42hvxki2q", "content": "CVE-2025-71358 - picklescan - Remote Code Execution via idlelib.autocomplete.AutoComplete.get_entity\nCVE ID : CVE-2025-71358\n \n Published : June 22, 2026, 9:04 p.m. | 2\u00a0hours, 5\u00a0minutes ago\n \n Description : picklescan before 0.0.29 fails to detect malicious pickle files that e...", "creation_timestamp": "2026-06-23T00:04:43.146884Z"}, {"uuid": "785438d4-5340-4ac0-9592-31584a8b1f8f", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "86ecb4e1-bb32-44d5-9f39-8a4673af8385", "vulnerability": "CVE-2025-71358", "type": "published-proof-of-concept", "source": "https://github.com/advisories/GHSA-6w4w-5w54-rjvr", "content": "", "creation_timestamp": "2025-08-26T18:37:10.000000Z"}, {"uuid": "e6dbdeab-73f0-470e-85dd-71cffb237759", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-71354", "type": "seen", "source": "https://bsky.app/profile/cve.skyfleet.blue/post/3mozzrnjger2y", "content": "CVE-2025-71354 - picklescan - Remote Code Execution via idlelib.debugobj.ObjectTreeItem.SetText\nCVE ID : CVE-2025-71354\n \n Published : June 24, 2026, 11:53 a.m. | 1\u00a0hour, 17\u00a0minutes ago\n \n Description : picklescan before 0.0.29 fails to detect malicious pickle files that explo...", "creation_timestamp": "2026-06-24T13:34:27.914663Z"}, {"uuid": "aa60bc6f-0c17-437d-9d47-26ed99026e4c", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-71354", "type": "seen", "source": "https://bsky.app/profile/postac001.bsky.social/post/3mp24sjeu6h2r", "content": "\u8981\u7d04\u751f\u6210\u306b\u5931\u6557\u3057\u305f\u305f\u3081\u3001\u8106\u5f31\u6027\u306e\u5b58\u5728\u306e\u307f\u901a\u77e5\u3057\u307e\u3059\u3002\nCVE-2025-71354 CVSS 8.1 | HIGH", "creation_timestamp": "2026-06-24T14:28:38.274032Z"}, {"uuid": "72a93435-9d66-4edf-abb5-c25bb3126304", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-71354", "type": "seen", "source": "https://bsky.app/profile/postac001.bsky.social/post/3mp2g3rpvot2y", "content": "picklescan 0.0.29\u672a\u6e80\u306f\u3001\u60aa\u610f\u3042\u308bpickle\u30d5\u30a1\u30a4\u30eb\u3092\u691c\u51fa\u3067\u304d\u307e\u305b\u3093\u3002\u653b\u6483\u8005\u306f\u691c\u51fa\u3092\u56de\u907f\u3059\u308b\u30b3\u30fc\u30c9\u3092\u57cb\u3081\u8fbc\u307f\u3001`pickle.load()`\u5b9f\u884c\u6642\u306b\u4efb\u610f\u306e\u30b3\u30de\u30f3\u30c9\u3092\u5b9f\u884c\u53ef\u80fd\u3067\u3059\u3002\nCVE-2025-71354 CVSS 8.1 | HIGH", "creation_timestamp": "2026-06-24T17:14:52.770962Z"}, {"uuid": "ff2e3622-1d14-4700-9c2f-2a3ee643cbae", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-71352", "type": "seen", "source": "https://bsky.app/profile/cve.skyfleet.blue/post/3mpkie7csbt25", "content": "CVE-2025-71352 - picklescan - Remote Code Execution via Undetected trace.Trace.runctx in Pickle Files\nCVE ID : CVE-2025-71352\n \n Published : June 30, 2026, 10:08 p.m. | 3\u00a0hours, 4\u00a0minutes ago\n \n Description : picklescan before 0.0.29 fails to detect the built-in Python trace.T...", "creation_timestamp": "2026-07-01T02:37:58.743585Z"}, {"uuid": "dfee624d-3495-40d8-9316-19fbb5c66638", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-71350", "type": "seen", "source": "https://bsky.app/profile/cve.skyfleet.blue/post/3mpkikqadfi26", "content": "CVE-2025-71350 - picklescan - Undetected Remote Code Execution via torch.utils.collect_env.run\nCVE ID : CVE-2025-71350\n \n Published : June 30, 2026, 10:08 p.m. | 3\u00a0hours, 4\u00a0minutes ago\n \n Description : picklescan before 0.0.28 fails to detect malicious pickle files using torch...", "creation_timestamp": "2026-07-01T02:41:37.788995Z"}, {"uuid": "ff138668-5f6d-4687-9c73-955fbd4e9b26", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-71355", "type": "seen", "source": "https://bsky.app/profile/kriptabiz.bsky.social/post/3mpmv7bifhz22", "content": "\u0423\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c CVE-2025-71355 \u0432 Picklescan: \u0443\u0433\u0440\u043e\u0437\u0430 \u0431\u0435\u0437\u043e\u043f\u0430\u0441\u043d\u043e\u0441\u0442\u0438 \u043f\u0440\u0438 \u0440\u0430\u0431\u043e\u0442\u0435 \u0441 \u0431\u0438\u0431\u043b\u0438\u043e\u0442\u0435\u043a\u043e\u0439 NumPy\n\n\n\nhttps://kripta.biz/posts/A840D354-04BF-4591-86BD-D009D26A4B1F", "creation_timestamp": "2026-07-02T01:33:11.200870Z"}, {"uuid": "d278009c-5841-40dc-94e8-453ed2293cdf", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-71356", "type": "seen", "source": "https://bsky.app/profile/cve.skyfleet.blue/post/3mpsaae4dge2h", "content": "CVE-2025-71356 - picklescan - Arbitrary Code Execution via torch.fx.experimental.symbolic_shapes.ShapeEnv.evaluate_guards_expression\nCVE ID : CVE-2025-71356\n \n Published : July 4, 2026, 1:23 a.m. | 2\u00a0hours, 23\u00a0minutes ago\n \n Description : picklescan before 0.0.28 fails to dete...", "creation_timestamp": "2026-07-04T04:33:57.411335Z"}, {"uuid": "52463a77-10a3-43c5-a593-a8359f9943fa", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-71353", "type": "seen", "source": "https://bsky.app/profile/cve.skyfleet.blue/post/3mpsahzpup32z", "content": "CVE-2025-71353 - picklescan - Remote Code Execution via torch._dynamo.guards.GuardBuilder.get\nCVE ID : CVE-2025-71353\n \n Published : July 4, 2026, 1:23 a.m. | 2\u00a0hours, 23\u00a0minutes ago\n \n Description : picklescan before 0.0.28 fails to detect malicious pickle files that exploit ...", "creation_timestamp": "2026-07-04T04:38:14.973663Z"}, {"uuid": "7420d076-9d4c-48c8-b55e-ccaf3095c67a", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-71359", "type": "seen", "source": "https://bsky.app/profile/cve.skyfleet.blue/post/3mpsbcv4ygp23", "content": "CVE-2025-71359 - picklescan - Unsafe Deserialization via lib2to3.pgen2.grammar.Grammar.loads\nCVE ID : CVE-2025-71359\n \n Published : July 4, 2026, 1:23 a.m. | 2\u00a0hours, 23\u00a0minutes ago\n \n Description : picklescan before 0.0.29 fails to detect malicious pickle payloads that utiliz...", "creation_timestamp": "2026-07-04T04:53:16.143012Z"}, {"uuid": "3346fcfd-529a-4705-a87e-1263497e3757", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-71356", "type": "seen", "source": "https://bsky.app/profile/thehackerwire.bsky.social/post/3mpsihbu66g26", "content": "\ud83d\udfe0 CVE-2025-71356 - High (8.1)\n\npicklescan before 0.0.28 fails to detect malicious torch.fx.experimental.symbolic_shapes.ShapeEnv...\n\nhttps://www.thehackerwire.com/vulnerability/CVE-2025-71356/\n\n#infosec #cybersecurity #CVE #vulnerability #security #patchstack", "creation_timestamp": "2026-07-04T07:01:00.475690Z"}, {"uuid": "a1ca3544-5109-478e-94aa-98b17feee1b2", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-71359", "type": "seen", "source": "https://bsky.app/profile/thehackerwire.bsky.social/post/3mpsz64odd62e", "content": "\ud83d\udfe0 CVE-2025-71359 - High (8.1)\n\npicklescan before 0.0.29 fails to detect malicious pickle payloads that utilize lib2to3.pgen2.gra...\n\nhttps://www.thehackerwire.com/vulnerability/CVE-2025-71359/\n\n#infosec #cybersecurity #CVE #vulnerability #security #patchstack", "creation_timestamp": "2026-07-04T12:00:06.919403Z"}, {"uuid": "b8178dc1-1c08-432c-8e18-2aea33830f5c", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-71359", "type": "seen", "source": "https://bsky.app/profile/potato.software/post/3mpt2irx6gc2m", "content": "\ud83d\udfe0 CVE-2025-71359 - High (8.1)\n\npicklescan before 0.0.29 fails to detect malicious pickle payloads that utilize lib2to3.pgen2.gra...\n\nhttps://www.themasherwire.com/vulnerability/CVE-2025-71359/\n\n#infosec #potatosecurity #CVE #vulnerability #security #patchstack", "creation_timestamp": "2026-07-04T12:24:00.316805Z"}, {"uuid": "2712a806-a2de-4cb5-8941-05173c22fe93", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-71353", "type": "seen", "source": "https://bsky.app/profile/thehackerwire.bsky.social/post/3mptgmha4ar2u", "content": "\ud83d\udfe0 CVE-2025-71353 - High (8.1)\n\npicklescan before 0.0.28 fails to detect malicious pickle files that exploit torch._dynamo.guards...\n\nhttps://www.thehackerwire.com/vulnerability/CVE-2025-71353/\n\n#infosec #cybersecurity #CVE #vulnerability #security #patchstack", "creation_timestamp": "2026-07-04T16:00:46.169306Z"}, {"uuid": "97a045a5-7809-45b9-b3f7-e8659ab8cbfb", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "86ecb4e1-bb32-44d5-9f39-8a4673af8385", "vulnerability": "CVE-2025-71354", "type": "published-proof-of-concept", "source": "https://github.com/advisories/GHSA-3vg9-h568-4w9m", "content": "", "creation_timestamp": "2026-07-21T14:35:16.878176Z"}]}