<h1>PIC100</h1>
<p>Loading serialized data with the pickle module can expose arbitrary code execution using the <strong>reduce</strong> method.</p>
<p>Before objects are serialised, they can have a custom <code>__reduce__</code> method attribute, which will execute on expansion during the pickle loader.</p>
<p>This can be used to injection malicious data into serialized data.</p>
<p>Because pickle is often used for caching or storing python objects by serialization, attackers will use this flaw to write arb