Skip to content
OpenAdvisories

Package · Debian

python-asteval

3 known vulnerabilities.

All Critical High Medium Low Exploited only

1 result · Clear filters · Feed

  • High 8.4
    CVE-2025-24359

    ASTEVAL Vulnerable to Maliciously Crafted Format Strings Leading to Sandbox Escape

    ASTEVAL is an evaluator of Python expressions and statements. Prior to version 1.0.6, if an attacker can control the input to the `asteval` library, they can bypass asteval's restrictions and execute arbitrary Python code in the context of the application usi…

    lmfit asteval asteval python-asteval Debian Ubuntu PyPI