pickles-in-numpy.yaml

rules:
  - id: pickles-in-numpy
    message: >-
      Functions reliant on pickle can result in arbitrary code execution. 
      Consider using fickling or switching to a safer serialization method
    languages: [python]
    severity: ERROR
    metadata:
      category: security
      cwe: "CWE-502: Deserialization of Untrusted Data"
      subcategory: [vuln]
      confidence: MEDIUM
      likelihood: MEDIUM
      impact: HIGH
      technology: [numpy]
      description: "Potential arbitrary code execution from `NumPy` functions reliant on pickling"
      references:
        - https://blog.trailofbits.com/2021/03/15/never-a-dill-moment-exploiting-machine-learning-pickle-files/

    patterns:
      - pattern: numpy.load(..., allow_pickle=$VALUE, ...)
      - pattern-not: numpy.load("...", ...)
      - pattern-not: numpy.load(..., file="...", ...)
      - metavariable-pattern:
          metavariable: $VALUE
          patterns:
            - pattern-not: |
                False
            - pattern-not: |
                []
            - pattern-not: |
                None
            - pattern-not: |
                ""