Skip to content
OpenAdvisories

Package · Debian

python-asteval

3 known vulnerabilities.

All Critical High Medium Low Exploited only

2 results · Clear filters · Feed

  • Medium 5.5
    CVE-2026-102734

    asteval sandbox escape: arbitrary native memory read/write via numpy ctypes in default asteval Interpreter

    asteval is a Python expression evaluator designed for restricted execution. Prior to 1.0.9, in asteval/astutils.py, the default Interpreter with numpy enabled exposes a ctypes type and permits from_address memory access. safe_getattr blocks the ctypes module …

    lmfit asteval asteval python-asteval Debian Ubuntu PyPI
  • Medium 5.0
    CVE-2026-55244

    ASTEVAL: Sandbox Escape via BaseException Subclasses

    ASTEVAL is an evaluator of Python expressions and statements. Prior to 1.0.9, FROM_PY in asteval/astutils.py exposes BaseException, SystemExit, KeyboardInterrupt, and GeneratorExit to expressions evaluated by asteval.Interpreter.eval(), while run() and eval()…

    lmfit asteval asteval python-asteval Debian Ubuntu PyPI