Description
There is a vulnerability in load() method in definitions/parser.py in the Danijar Hafner definitions package for Python. It can execute arbitrary python commands resulting in command execution.
Affected packages
| Ecosystem | Package | Affected | Fixed | Record |
|---|---|---|---|---|
| PyPI | definitions | <= 0.2.0 | — | GHSA-v4x4-98cg-wr4g |
| PyPI | definitions | all versions | — | PYSEC-2018-82 |