CVE-2026-3490: Picklescan Incomplete Blocklistcve-2026-3490-picklescan-incomplete-blocklist
The denylist for dangerous Python modules is missing critical bypasses like `pkgutil.resolve_name`.
Explore
Rule Explorer
Search the public rule index by CVE, GHSA, CWE, language, framework, author, or rule slug. Filter by language, framework, severity, confidence, license, and validation status.
- Public rules
- 2917
- Downloads
- 3.6M
- Verified
- 2917
- Authors
- 2
Search the rule indexUse CVE, GHSA, CWE, language, framework, package, or rule slug.
All matching rules loaded.