CVE-2026-16760 - Fickling check_safety() bypass: likely_safe_imports grants module-origin trust to unvalidated standard library callables
CVE ID :CVE-2026-16760 Published : Oct. 30, 2026, 9:16 p.m. | 44 minutes ago Description :In Trail of Bits fickling through 0.1.12, the _process_import() method in fickle.py adds an imported name to the likely_safe_imports set whenever the source module is present in sys.stdlib_module_names...