CVE-2024-48050

creationtimestamp| type| source ---|---|--- 2024-11-05 01:19:04+00:00| seen| https://t.me/cvedetector/9794...

adclaw (>=1.0.0, <=1.0.33), agentjet (0.0.1) +45 more potentially affected by CVE-2024-48050 via agentscope (>=0.1.0, <=2.0.6)

agentscope PYPI version =0.1.0, =1.0.0, =0.3.0, =0.1.0, =0.2.0, =0.1.5, =1.0.0.post2, =0.1.0b1, =0.1.0, =0.0.1, =0.1.0, =0.2.0 and more Source cves: CVE-2024-48050 Source advisory: SNYK:PYTHON-AGENTSCOPE-8344260...

CVE-2024-48050

In agentscope =v0.0.4, the file agentscope\web\workstation\workflowutils.py has the function iscallableexpression. Within this function, the line result = evals poses a security risk as it can directly execute user-provided commands...

CVE-2024-48050

In agentscope =v0.0.4, the file agentscope\web\workstation\workflowutils.py has the function iscallableexpression. Within this function, the line result = evals poses a security risk as it can directly execute user-provided commands...