CVE-2025-46417: MMAITRE314 Picklescan

High severity, CVSS 7.5. EPSS: 0.2% chance of exploitation in the next 30 days.

The unsafe globals in Picklescan before 0.0.25 do not include ssl. Consequently, ssl.get_server_certificate can exfiltrate data via DNS after deserialization.

Affected products

• MMAITRE314 Picklescan: before 0.0.25 (fixed in 0.0.25)

Published 2025-04-24. Last modified 2026-06-17.