Skip to content
OpenAdvisories

Package · PyPI

asteval

4 known vulnerabilities.

All Critical High Medium Low Exploited only Public exploit

2 results · Clear filters · Feed

  • High 8.4
    CVE-2025-24359

    ASTEVAL Vulnerable to Maliciously Crafted Format Strings Leading to Sandbox Escape

    ASTEVAL is an evaluator of Python expressions and statements. Prior to version 1.0.6, if an attacker can control the input to the `asteval` library, they can bypass asteval's restrictions and execute arbitrary Python code in the context of the application usi…

    lmfit asteval asteval python-asteval Debian Ubuntu PyPI
  • High 8.4
    GHSA-vp47-9734-prjw

    ASTEVAL Allows Malicious Tampering of Exposed AST Nodes Leads to Sandbox Escape

    ### Summary If an attacker can control the input to the asteval library, they can bypass its safety restrictions and execute arbitrary Python code within the application's context. ### Details The vulnerability is rooted in how `asteval` performs attribute ac…

    asteval PyPI