A couple vulns in Trail of Bits' Fickling.
GitHub
Bypass via marshal.loads() and types.FunctionType()
## Our assessment
Based on the test case provided in the original report below, this bypass was caused by `marshal` and `types` missing from our...
GitHub
Bypass via pty.spawn()
## Our assessment
Based on the test case provided in the original report below, this bypass was caused by `pty` missing from our block list of u...