UBUNTU-CVE-2026-102734

asteval is a Python expression evaluator designed for restricted execution. Prior to 1.0.9, in asteval/astutils.py, the default Interpreter with numpy enabled exposes a ctypes type and permits fromaddress memory access. safegetattr blocks the ctypes module but not reachable ctypes type objects,...

Linux Distros Unpatched Vulnerability : CVE-2026-102734

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - asteval is a Python expression evaluator designed for restricted execution. Prior to 1.0.9, in asteval/astutils.py, the default Interpreter with numpy enabled...

ai-sec (>=0.0.1, <=0.0.9), awslabs-ccapi-mcp-server (>=1.0.1, <=1.0.18) +54 more potentially affected by CVE-2026-102734 via asteval (>=1.0.5, <=1.0.8)

asteval PYPI version =1.0.5, =0.0.1, =1.0.1, =0.0.1, =1.0.254, =2.4.22, =3.2.415, =1.0.0, =0.1.130, =6.0.0, =0.1.0, =0.1.1, =0.1.0, =0.1.6.dev8, =0.1.6.dev40 and more Source cves: CVE-2026-102734 Source advisory: SNYK:PYTHON-ASTEVAL-20883326...

Uncaught Exception

Overview asteval is a Safe, minimalistic evaluator of python expression using ast module Affected versions of this package are vulnerable to Uncaught Exception via the parse, run, eval, and importmodule methods of the Interpreter class, which do not catch KeyboardInterrupt, SystemExit, or...

DEBIAN-CVE-2026-102734

asteval is a Python expression evaluator designed for restricted execution. Prior to 1.0.9, in asteval/astutils.py, the default Interpreter with numpy enabled exposes a ctypes type and permits fromaddress memory access. safegetattr blocks the ctypes module but not reachable ctypes type objects,...

CVE-2026-102734

asteval is a Python expression evaluator designed for restricted execution. Prior to 1.0.9, in asteval/astutils.py, the default Interpreter with numpy enabled exposes a ctypes type and permits fromaddress memory access. safegetattr blocks the ctypes module but not reachable ctypes type objects,...

CVE-2026-102734

asteval is a Python expression evaluator designed for restricted execution. Prior to 1.0.9, in asteval/astutils.py, the default Interpreter with numpy enabled exposes a ctypes type and permits fromaddress memory access. safegetattr blocks the ctypes module but not reachable ctypes type objects,...

CVE-2026-102734

The asteval Python expression evaluator (prior to version 1.0.9 ) contains a sandbox escape vulnerability in asteval/astutils.py . When numpy is enabled, the default Interpreter exposes a ctypes type and allows memory access via from_address. While safe_getattr blocks the ctypes module, it fails ...

EUVD-2026-98813

asteval is a Python expression evaluator designed for restricted execution. Prior to 1.0.9, in asteval/astutils.py, the default Interpreter with numpy enabled exposes a ctypes type and permits fromaddress memory access. safegetattr blocks the ctypes module but not reachable ctypes type objects,...

CVE-2026-102734 asteval sandbox escape: arbitrary native memory read/write via numpy ctypes in default asteval Interpreter

asteval is a Python expression evaluator designed for restricted execution. Prior to 1.0.9, in asteval/astutils.py, the default Interpreter with numpy enabled exposes a ctypes type and permits fromaddress memory access. safegetattr blocks the ctypes module but not reachable ctypes type objects,...

CVE-2026-102734

asteval is a Python expression evaluator designed for restricted execution. Prior to 1.0.9, in asteval/astutils.py, the default Interpreter with numpy enabled exposes a ctypes type and permits fromaddress memory access. safegetattr blocks the ctypes module but not reachable ctypes type objects,...

CVE-2026-102734 asteval sandbox escape: arbitrary native memory read/write via numpy ctypes in default asteval Interpreter

asteval is a Python expression evaluator designed for restricted execution. Prior to 1.0.9, in asteval/astutils.py, the default Interpreter with numpy enabled exposes a ctypes type and permits fromaddress memory access. safegetattr blocks the ctypes module but not reachable ctypes type objects,...

ai-sec (>=0.0.1, <=0.0.9), awslabs-ccapi-mcp-server (>=1.0.1, <=1.0.18) +54 more potentially affected by CVE-2026-102734 via asteval (>=1.0.5, <=1.0.8)

asteval PYPI version =1.0.5, =0.0.1, =1.0.1, =0.0.1, =1.0.254, =2.4.22, =3.2.415, =1.0.0, =0.1.130, =6.0.0, =0.1.0, =0.1.1, =0.1.0, =0.1.6.dev8, =0.1.6.dev40 and more Source cves: CVE-2026-102734 Source advisory: MEND:CVE-2026-102734...

CVE-2026-102734

asteval is a Python expression evaluator designed for restricted execution. Prior to 1.0.9, in asteval/astutils.py, the default Interpreter with numpy enabled exposes a ctypes type and permits fromaddress memory access. safegetattr blocks the ctypes module but not reachable ctypes type objects,...

CVE-2026-102734 asteval sandbox escape: arbitrary native memory read/write via numpy ctypes in default asteval Interpreter

asteval is a Python expression evaluator designed for restricted execution. Prior to 1.0.9, in asteval/astutils.py, the default Interpreter with numpy enabled exposes a ctypes type and permits fromaddress memory access. safegetattr blocks the ctypes module but not reachable ctypes type objects,...

CVE-2026-102734: Protection Mechanism Failure

asteval is a Python expression evaluator designed for restricted execution. Prior to 1.0.9, in asteval/astutils.py, the default Interpreter with numpy enabled exposes a ctypes type and permits fromaddress memory access. safegetattr blocks the ctypes module but not reachable ctypes type objects,...

lmfit ASTEVAL processing logic error vulnerability

The lmfit ASTEVAL version prior to 1.0.9 has security vulnerabilities. These vulnerabilities stem from the default interpreter, which exposes the ctypes type when numpy is enabled. This allows access to memory through the fromaddress function. The safegetattr function does not intercept objects...

Security update for python-asteval (moderate)

openSUSE Security Update: Security update for python-asteval Announcement ID: openSUSE-SU-2026:0329-1 Rating: moderate References: 1273147 Cross-References: CVE-2026-55244 Affected Products: openSUSE Backports SLE-15-SP7 An update that fixes one vulnerability is now available. Description: This...

Linux Distros Unpatched Vulnerability : CVE-2026-55244

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - ASTEVAL is an evaluator of Python expressions and statements. Prior to 1.0.9, FROMPY in asteval/astutils.py exposes BaseException, SystemExit, KeyboardInterrupt...

DEBIAN-CVE-2026-55244

ASTEVAL is an evaluator of Python expressions and statements. Prior to 1.0.9, FROMPY in asteval/astutils.py exposes BaseException, SystemExit, KeyboardInterrupt, and GeneratorExit to expressions evaluated by asteval.Interpreter.eval, while run and eval in asteval/asteval.py catch Exception rather...