CVE-2026-22612

HIGH

Trailofbits Fickling < 0.1.7 - Insecure Deserialization

Title source: rule

Description

Fickling is a Python pickling decompiler and static analyzer. Prior to version 0.1.7, Fickling is vulnerable to detection bypass due to "builtins" blindness. This issue has been patched in version 0.1.7.

References (3)

Scores

CVSS v3 7.8
EPSS 0.0006
EPSS Percentile 18.2%
Attack Vector LOCAL
CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H

Classification

CWE
CWE-502
Status published

Affected Products (2)

trailofbits/fickling < 0.1.7
pypi/fickling < 0.1.7PyPI

Timeline

Published Jan 10, 2026
Tracked Since Feb 18, 2026