pickles-in-numpy.yaml

rules:
- id: pickles-in-numpy
  message: >-
    Functions reliant on pickle can result in arbitrary code execution. 
    Consider using fickling or switching to a safer serialization method
  languages: [python]
  severity: ERROR
  metadata:
    category: security
    cwe: "CWE-502: Deserialization of Untrusted Data"
    subcategory: [vuln]
    confidence: MEDIUM
    likelihood: MEDIUM
    impact: HIGH
    technology: [numpy]
    description: "Potential arbitrary code execution from `NumPy` functions reliant on pickling"
    references:
      - https://blog.trailofbits.com/2021/03/15/never-a-dill-moment-exploiting-machine-learning-pickle-files/

  patterns:
    - pattern: numpy.load(..., allow_pickle=$VALUE, ...)
    - pattern-not: numpy.load("...", ...)
    - pattern-not: numpy.load(..., file="...", ...)
    - metavariable-pattern:
        metavariable: $VALUE
        patterns:
          - pattern-not: |
              False
          - pattern-not: |
              []
          - pattern-not: |
              None
          - pattern-not: |
              ""