Skip to content

Security: Remediation of RCE via Insecure Pickle Deserialization and Hardening of I/O URIs#404

Open
JoshuaProvoste wants to merge 1 commit into
google:mainfrom
JoshuaProvoste:sec/pyglove-rce-mitigation
Open

Security: Remediation of RCE via Insecure Pickle Deserialization and Hardening of I/O URIs#404
JoshuaProvoste wants to merge 1 commit into
google:mainfrom
JoshuaProvoste:sec/pyglove-rce-mitigation

Security refactor: Replace pickle with msgpack and harden IO against …

6a39ffe
Select commit
Loading
Failed to load commit list.
Google CLA / cla/google succeeded Apr 6, 2026 in 1s

✅ All contributors are covered under a CLA with Google

See https://cla.developers.google.com/ for more info about Google's Contributor License Agreement (CLA).

ℹ️ Googlers: Go here to view more details and manage scans for this pull request.

Details

The following contributors were found for this pull request:

6a39ffe Author: @JoshuaProvoste <8358462+JoshuaProvoste​@users.noreply.github.com>

(Only the first commit for a unique contributor is listed.)