CVE-2026-22612

EUVD-2026-1881
Fickling is a Python pickling decompiler and static analyzer. Prior to version 0.1.7, Fickling is vulnerable to detection bypass due to "builtins" blindness. This issue has been patched in version 0.1.7.
ProviderTypeBase ScoreAtk. VectorAtk. ComplexityPriv. RequiredVector
NISTPrimary
7.8 HIGH
LOCAL
LOW
NONE
CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H
Base Score
CVSS 3.x
EPSS Score
Percentile: 18%
Affected Products (NVD)
VendorProductVersion
trailofbitsfickling
𝑥
< 0.1.7
𝑥
= Vulnerable software versions
Common Weakness Enumeration
References
https://github.com/trailofbits/fickling/commit/9f309ab834797f280cb5143a2f6f987579fa7cdf
https://github.com/trailofbits/fickling/releases/tag/v0.1.7
https://github.com/trailofbits/fickling/security/advisories/GHSA-h4rm-mm56-xf63
https://github.com/trailofbits/fickling/security/advisories/GHSA-h4rm-mm56-xf63