PkgRadar

PyPI · pypi.org

defirl

Py Runtime Pickle Loads: pickle/marshal.loads — deserializes arbitrary objects, RCE if attacker-controlled.

Why PkgRadar flagged 1.2.6

SeveritySignalEvidence
mediumPy Runtime Pickle Loadspickle/marshal.loads — deserializes arbitrary objects, RCE if attacker-controlled. · defirl-1.2.6/src/defirl/rl.py
mediumPy Runtime Pickle Loadspickle/marshal.loads — deserializes arbitrary objects, RCE if attacker-controlled. · defirl-1.2.6/src/defirl/rlhf_long.py
mediumPy Runtime Pickle Loadspickle/marshal.loads — deserializes arbitrary objects, RCE if attacker-controlled. · defirl-1.2.6/src/defirl/rlhf_rdql.py
mediumPy Runtime Pickle Loadspickle/marshal.loads — deserializes arbitrary objects, RCE if attacker-controlled. · defirl-1.2.6/src/defirl/rlhf_short.py

Scanned versions

VersionVerdictScoreScanned (UTC)
1.3.2Low risk02026-06-14
1.3.1Low risk02026-06-11
1.3.0Low risk02026-06-07
1.2.9Low risk02026-06-04
1.2.8Low risk02026-06-04
1.2.6Review272026-05-26

Block this in CI

PkgRadar gates defirl (and every other dependency) before it merges. One line in your pipeline:

pkgradar gate --ecosystem pypi defirl==1.2.6
Start free — 25 scans / moView full evidence