netbird/advisory-database
0
0
Fork 0
mirror of https://github.com/netbirdio/advisory-database.git synced 2026-05-22 18:04:22 -07:00
Code Issues Packages Projects Releases Wiki Activity

Publish Advisories

Browse Source 
GHSA-2fh4-gpch-vqv4
GHSA-7q5r-7gvp-wc82
GHSA-w6mr-mj53-x258
GHSA-w8jq-xcqf-f792
GHSA-2fh4-gpch-vqv4
GHSA-w6mr-mj53-x258
This commit is contained in:
advisory-database[bot]
2025-03-10 18:28:29 +00:00
parent 4054c65c81
commit 14d8e796a8
6 changed files with 266 additions and 88 deletions
Download Patch File Download Diff File Expand all files Collapse all files
advisories/github-reviewed/2025/03/GHSA-2fh4-gpch-vqv4/GHSA-2fh4-gpch-vqv4.json
+64
View File
@@ -0,0 +1,64 @@
{
"schema_version": "1.4.0",
"id": "GHSA-2fh4-gpch-vqv4",
"modified": "2025-03-10T18:26:10Z",
"published": "2025-03-10T12:30:56Z",
"withdrawn": "2025-03-10T18:26:09Z",
"aliases": [],
"summary": "Zip Flag Bit Exploit Crashes Picklescan But Not PyTorch",
"details": "## Duplicate Advisory\nThis advisory has been withdrawn because it is a duplicate of GHSA-w8jq-xcqf-f792. This link is maintained to preserve external references.\n\n## Original Description\npicklescan before 0.0.23 fails to detect malicious pickle files inside PyTorch model archives when certain ZIP file flag bits are modified. By flipping specific bits in the ZIP file headers, an attacker can embed malicious pickle files that remain undetected by PickleScan while still being successfully loaded by PyTorch's torch.load(). This can lead to arbitrary code execution when loading a compromised model.",
"severity": [
{
"type": "CVSS_V4",
"score": "CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:P/VC:N/VI:L/VA:L/SC:N/SI:L/SA:L/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X"
}
],
"affected": [
{
"package": {
"ecosystem": "PyPI",
"name": "picklescan"
},
"ranges": [
{
"type": "ECOSYSTEM",
"events": [
{
"introduced": "0"
},
{
"fixed": "0.0.23"
}
]
}
]
}
],
"references": [
{
"type": "WEB",
"url": "https://github.com/mmaitre314/picklescan/security/advisories/GHSA-w8jq-xcqf-f792"
},
{
"type": "ADVISORY",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2025-1945"
},
{
"type": "WEB",
"url": "https://github.com/mmaitre314/picklescan/commit/e58e45e0d9e091159c1554f9b04828bbb40b9781"
},
{
"type": "WEB",
"url": "https://sites.google.com/sonatype.com/vulnerabilities/cve-2025-1945"
}
],
"database_specific": {
"cwe_ids": [
"CWE-345"
],
"severity": "MODERATE",
"github_reviewed": true,
"github_reviewed_at": "2025-03-10T18:26:09Z",
"nvd_published_at": "2025-03-10T12:15:12Z"
}
}
advisories/github-reviewed/2025/03/GHSA-7q5r-7gvp-wc82/GHSA-7q5r-7gvp-wc82.json
+69
View File
File diff suppressed because one or more lines are too long
advisories/github-reviewed/2025/03/GHSA-w6mr-mj53-x258/GHSA-w6mr-mj53-x258.json
+64
View File
@@ -0,0 +1,64 @@
{
"schema_version": "1.4.0",
"id": "GHSA-w6mr-mj53-x258",
"modified": "2025-03-10T18:25:48Z",
"published": "2025-03-10T12:30:55Z",
"withdrawn": "2025-03-10T18:25:47Z",
"aliases": [],
"summary": "Duplicate Advisory: Zip Exploit Crashes Picklescan But Not PyTorch ",
"details": "## Duplicate Advisory\nThis advisory has been withdrawn because it is a duplicate of GHSA-7q5r-7gvp-wc82. This link is maintained to preserve external references.\n\n## Original Description\npicklescan before 0.0.23 is vulnerable to a ZIP archive manipulation attack that causes it to crash when attempting to extract and scan PyTorch model archives. By modifying the filename in the ZIP header while keeping the original filename in the directory listing, an attacker can make PickleScan raise a BadZipFile error. However, PyTorch's more forgiving ZIP implementation still allows the model to be loaded, enabling malicious payloads to bypass detection.",
"severity": [
{
"type": "CVSS_V4",
"score": "CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:P/VC:N/VI:L/VA:L/SC:N/SI:L/SA:L/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X"
}
],
"affected": [
{
"package": {
"ecosystem": "PyPI",
"name": "picklescan"
},
"ranges": [
{
"type": "ECOSYSTEM",
"events": [
{
"introduced": "0"
},
{
"fixed": "0.0.23"
}
]
}
]
}
],
"references": [
{
"type": "WEB",
"url": "https://github.com/mmaitre314/picklescan/security/advisories/GHSA-7q5r-7gvp-wc82"
},
{
"type": "ADVISORY",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2025-1944"
},
{
"type": "WEB",
"url": "https://github.com/mmaitre314/picklescan/commit/e58e45e0d9e091159c1554f9b04828bbb40b9781"
},
{
"type": "WEB",
"url": "https://sites.google.com/sonatype.com/vulnerabilities/cve-2025-1944"
}
],
"database_specific": {
"cwe_ids": [
"CWE-345"
],
"severity": "MODERATE",
"github_reviewed": true,
"github_reviewed_at": "2025-03-10T18:25:47Z",
"nvd_published_at": "2025-03-10T12:15:10Z"
}
}
advisories/github-reviewed/2025/03/GHSA-w8jq-xcqf-f792/GHSA-w8jq-xcqf-f792.json
+69
View File
File diff suppressed because one or more lines are too long
advisories/unreviewed/2025/03/GHSA-2fh4-gpch-vqv4/GHSA-2fh4-gpch-vqv4.json
-44
View File
@@ -1,44 +0,0 @@
{
"schema_version": "1.4.0",
"id": "GHSA-2fh4-gpch-vqv4",
"modified": "2025-03-10T12:30:56Z",
"published": "2025-03-10T12:30:56Z",
"aliases": [
"CVE-2025-1945"
],
"details": "picklescan before 0.0.23 fails to detect malicious pickle files inside PyTorch model archives when certain ZIP file flag bits are modified. By flipping specific bits in the ZIP file headers, an attacker can embed malicious pickle files that remain undetected by PickleScan while still being successfully loaded by PyTorch's torch.load(). This can lead to arbitrary code execution when loading a compromised model.",
"severity": [
{
"type": "CVSS_V4",
"score": "CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:P/VC:N/VI:L/VA:L/SC:N/SI:L/SA:L/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X"
}
],
"affected": [],
"references": [
{
"type": "WEB",
"url": "https://github.com/mmaitre314/picklescan/security/advisories/GHSA-w8jq-xcqf-f792"
},
{
"type": "ADVISORY",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2025-1945"
},
{
"type": "WEB",
"url": "https://github.com/mmaitre314/picklescan/commit/e58e45e0d9e091159c1554f9b04828bbb40b9781"
},
{
"type": "WEB",
"url": "https://sites.google.com/sonatype.com/vulnerabilities/cve-2025-1945"
}
],
"database_specific": {
"cwe_ids": [
"CWE-345"
],
"severity": "MODERATE",
"github_reviewed": false,
"github_reviewed_at": null,
"nvd_published_at": "2025-03-10T12:15:12Z"
}
}
advisories/unreviewed/2025/03/GHSA-w6mr-mj53-x258/GHSA-w6mr-mj53-x258.json
-44
View File
@@ -1,44 +0,0 @@
{
"schema_version": "1.4.0",
"id": "GHSA-w6mr-mj53-x258",
"modified": "2025-03-10T12:30:55Z",
"published": "2025-03-10T12:30:55Z",
"aliases": [
"CVE-2025-1944"
],
"details": "picklescan before 0.0.23 is vulnerable to a ZIP archive manipulation attack that causes it to crash when attempting to extract and scan PyTorch model archives. By modifying the filename in the ZIP header while keeping the original filename in the directory listing, an attacker can make PickleScan raise a BadZipFile error. However, PyTorch's more forgiving ZIP implementation still allows the model to be loaded, enabling malicious payloads to bypass detection.",
"severity": [
{
"type": "CVSS_V4",
"score": "CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:P/VC:N/VI:L/VA:L/SC:N/SI:L/SA:L/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X"
}
],
"affected": [],
"references": [
{
"type": "WEB",
"url": "https://github.com/mmaitre314/picklescan/security/advisories/GHSA-7q5r-7gvp-wc82"
},
{
"type": "ADVISORY",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2025-1944"
},
{
"type": "WEB",
"url": "https://github.com/mmaitre314/picklescan/commit/e58e45e0d9e091159c1554f9b04828bbb40b9781"
},
{
"type": "WEB",
"url": "https://sites.google.com/sonatype.com/vulnerabilities/cve-2025-1944"
}
],
"database_specific": {
"cwe_ids": [
"CWE-345"
],
"severity": "MODERATE",
"github_reviewed": false,
"github_reviewed_at": null,
"nvd_published_at": "2025-03-10T12:15:10Z"
}
}