[GHSA-xp4f-hrf8-rxw7] Picklescan is missing detection when calling built-in python ensurepip._run_pip

[Amayyas]

Updates

• CWEs

Comments
This advisory currently has no CWE assigned.

Picklescan works by maintaining a blocklist of dangerous functions/globals to
flag inside pickle files. This advisory shows that ensurepip._run_pip can be
invoked via a crafted __reduce__ method to achieve remote code execution
(demonstrated PoC included), yet it is absent from picklescan's blocklist and
goes undetected.

This matches CWE-184: Incomplete List of Disallowed Inputs — the product
implements a "deny list" to protect against dangerous inputs, but the list is
incomplete.

This is consistent with how GitHub already classifies the identical advisory
pattern in this same repository: GHSA-v7x6-rv5q-mhwc ("Picklescan missing
detection when calling built-in python library function timeit.timeit()") is
classified as CWE-184.

Reference: GHSA-xp4f-hrf8-rxw7

[github]

Hi there @mmaitre314! A community member has suggested an improvement to your security advisory. If approved, this change will affect the global advisory listed at github.com/advisories. It will not affect the version listed in your project repository.

This change will be reviewed by our Security Curation Team. If you have thoughts or feedback, please share them in a comment here! If this PR has already been closed, you can start a new community contribution for this advisory