agent-smith-ai (>=0.9.2, <=1.0.1), awslabs-ccapi-mcp-server (>=1.0.1, <=1.0.18) +38 more potentially affected by CVE-2025-24359 via asteval (>=0.9.21, <=1.0.5)

asteval PYPI version =0.9.21, =0.9.2, =1.0.1, =3.2.415, =3.2.415, =0.2.0rc0, =0.1.0, =0.1.130, =6.0.0, =0.2.0, =0.1.0, =0.0.1.dev6, =2.1.3, =3.0.0a3 and more Source cves: CVE-2025-24359 Source advisory: MEND:CVE-2025-24359...

CVE-2025-24359 ASTEVAL Vulnerable to Maliciously Crafted Format Strings Leading to Sandbox Escape

ASTEVAL is an evaluator of Python expressions and statements. Prior to version 1.0.6, if an attacker can control the input to the asteval library, they can bypass asteval's restrictions and execute arbitrary Python code in the context of the application using the library. The vulnerability is...

CVE-2025-24359

CVE-2025-24359 affects the Python package asteval prior to 1.0.6. The root cause is in the handling of FormattedValue AST nodes in on_formattedvalue, which uses the dangerous Str.format path (fmt.format(fstring =val)). This can allow an attacker who controls input to bypass restrictions and execu...

CVE-2025-24359

ASTEVAL is an evaluator of Python expressions and statements. Prior to version 1.0.6, if an attacker can control the input to the asteval library, they can bypass asteval's restrictions and execute arbitrary Python code in the context of the application using the library. The vulnerability is...

CVE-2025-24359: Use of Externally-Controlled Format String

ASTEVAL is an evaluator of Python expressions and statements. Prior to version 1.0.6, if an attacker can control the input to the asteval library, they can bypass asteval's restrictions and execute arbitrary Python code in the context of the application using the library. The vulnerability is...

PT-2025-5341

Name of the Vulnerable Software and Affected Versions asteval versions prior to 1.0.6 Description The issue is rooted in how asteval performs handling of FormattedValue AST nodes, specifically the on formattedvalue value using the dangerous format method of the str class. This allows an attacker ...

ASTEVAL security vulnerabilities

ASTEVAL is an open source library from lmfit that uses the ast module for parsimony evaluation of python expressions. A security vulnerability exists in ASTEVAL versions prior to 1.0.6, which stems from If an attacker has control over the inputs to the asteval library, it is possible to bypass...

ASTEVAL Allows Malicious Tampering of Exposed AST Nodes Leads to Sandbox Escape

Summary If an attacker can control the input to the asteval library, they can bypass its safety restrictions and execute arbitrary Python code within the application's context. Details The vulnerability is rooted in how asteval performs attribute access verification. In particular, the onattribut...

GHSA-VP47-9734-PRJW ASTEVAL Allows Malicious Tampering of Exposed AST Nodes Leads to Sandbox Escape

Summary If an attacker can control the input to the asteval library, they can bypass its safety restrictions and execute arbitrary Python code within the application's context. Details The vulnerability is rooted in how asteval performs attribute access verification. In particular, the onattribut...

eunomia (>=0.0.1.dev6, <=0.0.1.dev12), molmag-ac-gui (>=0.1.0, <=0.2.5) potentially affected by unknown CVE via asteval (0.9.21)

asteval PYPI version 0.9.21 is affected by a known vulnerability. The following packages have a transitive dependency on asteval and may be impacted: - eunomia =0.0.1.dev6, =0.1.0, =0.2.5 Source cves: unknown CVE Source advisory: OSV:GHSA-VP47-9734-PRJW...

eunomia (>=0.0.1.dev15, <=0.0.1.dev20) potentially affected by unknown CVE via asteval (0.9.22)

asteval PYPI version 0.9.22 is affected by a known vulnerability. The following packages have a transitive dependency on asteval and may be impacted: - eunomia =0.0.1.dev15, =0.0.1.dev20 Source cves: unknown CVE Source advisory: OSV:GHSA-VP47-9734-PRJW...

gs-quant (>=0.8.305, <=1.0.51), resolwe (>=28.2.1, <=29.3.0) +1 more potentially affected by unknown CVE via asteval (0.9.23)

asteval PYPI version 0.9.23 is affected by a known vulnerability. The following packages have a transitive dependency on asteval and may be impacted: - gs-quant =0.8.305, =28.2.1, =37.0.0, =43.0.0 Source cves: unknown CVE Source advisory: OSV:GHSA-VP47-9734-PRJW...

resolwe (>=30.0.0a1, <=35.2.0a1), resolwe-bio (>=44.0.0a1, <=52.1.0) potentially affected by unknown CVE via asteval (0.9.26)

asteval PYPI version 0.9.26 is affected by a known vulnerability. The following packages have a transitive dependency on asteval and may be impacted: - resolwe =30.0.0a1, =44.0.0a1, =52.1.0 Source cves: unknown CVE Source advisory: OSV:GHSA-VP47-9734-PRJW...

resolwe (>=36.0.0a1, <=40.0.0), resolwe-bio (>=0.0.0, <=57.0.1) potentially affected by unknown CVE via asteval (0.9.29)

asteval PYPI version 0.9.29 is affected by a known vulnerability. The following packages have a transitive dependency on asteval and may be impacted: - resolwe =36.0.0a1, =0.0.0, =57.0.1 Source cves: unknown CVE Source advisory: OSV:GHSA-VP47-9734-PRJW...

kalkon (>=0.1.0, <=0.4.0) potentially affected by unknown CVE via asteval (0.9.31)

asteval PYPI version 0.9.31 is affected by a known vulnerability. The following packages have a transitive dependency on asteval and may be impacted: - kalkon =0.1.0, =0.4.0 Source cves: unknown CVE Source advisory: OSV:GHSA-VP47-9734-PRJW...

agent-smith-ai (>=0.9.2, <=1.0.1), bibliomancer (0.1.0) +24 more potentially affected by unknown CVE via asteval (0.9.33)

asteval PYPI version 0.9.33 is affected by a known vulnerability. The following packages have a transitive dependency on asteval and may be impacted: - agent-smith-ai =0.9.2, =0.2.0rc0, =0.1.0, =0.2.0, =0.1.0, =2.1.3, =2.1.0b2, =2.5.1, =0.4.0, =0.1.4, =0.7.0, =0.3.0, =0.5.0 and more Source cves:...

awslabs-ccapi-mcp-server (>=1.0.1, <=1.0.18), bridgecrew (>=3.2.415, <=3.2.477) +10 more potentially affected by unknown CVE via asteval (1.0.5)

asteval PYPI version 1.0.5 is affected by a known vulnerability. The following packages have a transitive dependency on asteval and may be impacted: - awslabs-ccapi-mcp-server =1.0.1, =3.2.415, =3.2.415, =0.1.130, =6.0.0, =5.8.0, =5.8.0, =0.0.8, =0.1.0, =0.31.0 Source cves: unknown CVE Source...

awslabs-ccapi-mcp-server (>=1.0.1, <=1.0.18), bridgecrew (>=3.2.415, <=3.2.477) +10 more potentially affected by unknown CVE via asteval (1.0.5)

asteval PYPI version 1.0.5 is affected by a known vulnerability. The following packages have a transitive dependency on asteval and may be impacted: - awslabs-ccapi-mcp-server =1.0.1, =3.2.415, =3.2.415, =0.1.130, =6.0.0, =5.8.0, =5.8.0, =0.0.8, =0.1.0, =0.31.0 Source cves: unknown CVE Source...

awslabs-ccapi-mcp-server (>=1.0.1, <=1.0.18), bridgecrew (>=3.2.415, <=3.2.477) +10 more potentially affected by unknown CVE via asteval (1.0.5)

asteval PYPI version 1.0.5 is affected by a known vulnerability. The following packages have a transitive dependency on asteval and may be impacted: - awslabs-ccapi-mcp-server =1.0.1, =3.2.415, =3.2.415, =0.1.130, =6.0.0, =5.8.0, =5.8.0, =0.0.8, =0.1.0, =0.31.0 Source cves: unknown CVE Source...

Exposed Dangerous Method or Function

Overview asteval is a Safe, minimalistic evaluator of python expression using ast module Affected versions of this package are vulnerable to Exposed Dangerous Method or Function stems from the library's attribute access verification method, specifically within the onattribute node handler. The...