picklescan ZIP crash leads to scan bypass (CVE-2025-1944)
Date: 2025
Affected: picklescan <0.0.23
Attack vector: supply-chain
Category: vulnerability-disclosure
Severity: High

picklescan <0.0.23 is vulnerable to a ZIP-archive manipulation attack that crashes it when scanning PyTorch model archives, allowing malicious models to be loaded unscanned.


Mitigations:

Architectural layers (MAESTRO):