Skip to content
OpenAdvisories

Package · PyPI

python-statemachine

1 known vulnerabilities.

All Critical High Medium Low Exploited only Public exploit

1 result · Clear filters · Feed

  • Critical 9.8
    CVE-2026-47103 Public exploit

    Python StateMachine 3.0.0 < 3.2.0 RCE via SCXML eval() Injection

    Python StateMachine versions 3.0.0 before 3.2.0 contains a remote code execution vulnerability that allows attackers to execute arbitrary code by supplying malicious SCXML documents containing crafted `<data expr="...">` attributes evaluated unsafely. The SCX…

    fgmacedo python-statemachine python-statemachine PyPI