Lucene search
+L

3 matches found

OSV
OSV
added 2026/03/16 2:19 p.m.15 views

UBUNTU-CVE-2026-32640

SimpleEval is a library for adding evaluatable expressions into python projects. Prior to 1.0.5, objects including modules can leak dangerous modules through to direct access inside the sandbox. If the objects you've passed in as names to SimpleEval have modules or other disallowed / dangerous...

9.8CVSS5.8AI score0.00524EPSS
SaveExploits0References4
ATTACKERKB
ATTACKERKB
added 2026/03/13 9:3 p.m.2 views

CVE-2026-32640

SimpleEval is a library for adding evaluatable expressions into python projects. Prior to 1.0.5, objects including modules can leak dangerous modules through to direct access inside the sandbox. If the objects you've passed in as names to SimpleEval have modules or other disallowed / dangerous...

8.7CVSS5.8AI score0.00524EPSS
SaveExploits0References2Affected Software1
OSV
OSV
added 2024/11/06 8:15 p.m.4 views

UBUNTU-CVE-2024-51754

Twig is a template language for PHP. In a sandbox, an attacker can call toString on an object even if the toString method is not allowed by the security policy when the object is part of an array or an argument list arguments to a function or a filter for instance. This issue has been patched in...

2.2CVSS5.7AI score0.00444EPSS
SaveExploits0References5
Rows per page
Query Builder