Skip to content
OpenAdvisories

Package · PyPI

pycel

1 known vulnerabilities.

1 result · Feed

  • Critical 9.8
    CVE-2024-53924 Public exploit

    Pycel allows code injection via a crafted formula

    Pycel through 1.0b30, when operating on an untrusted spreadsheet, allows code execution via a crafted formula in a cell, such as one beginning with the =IF(A1=200, eval("__import__('os').system( substring.