86 matches found
SUSE-SU-2024:2272-1 Security update for python-Js2Py
This update for python-Js2Py fixes the following issues: - CVE-2024-28397: Fixed a potential sandbox escape via untrusted JavaScript code bsc1226660...
OPENSUSE-SU-2024:14086-1 python310-Js2Py-0.74-3.1 on GA media
These are all security issues fixed in the python310-Js2Py-0.74-3.1 package on the GA media of openSUSE Tumbleweed...
Js2Py Code Execution Vulnerability
Js2Py is a library from the Python Foundation. It is used to convert JavaScript to Python code. A code execution vulnerability exists in Js2Py version 0.74 and earlier, which can be exploited by an attacker to execute arbitrary code via a crafted API call...
Remote Code Execution (RCE)
js2py is vulnerable to Remote Code Execution RCE. The vulnerability is due to the js2py.disablepyimport function failing to prevent JS sandbox escape, which allows an attacker to send crafted API calls which results in arbitrary code execution...
Exploit for CVE-2024-28397
Perkenalan 中文 js2py is a popular python...
GHSA-H95X-26F3-88HR js2py allows remote code execution
An issue in the component js2py.disablepyimport of js2py up to v0.74 allows attackers to execute arbitrary code via a crafted API call...
abersetz (>=1.0.9, <=1.1.0), acfunsdk (0.8.3) +128 more potentially affected by CVE-2024-28397 via js2py (>=0.50.0, <=0.74.0)
js2py PYPI version =0.50.0, =1.0.9, =1.3.93, =3.4.0, =2.51.0, =0.0.1, =0.1.5, =0.1.1, =0.2.2, =0.72.2, =0.0.8, =0.0.10 and more Source cves: CVE-2024-28397 Source advisory: GHSA-H95X-26F3-88HR...
abersetz (>=1.0.9, <=1.1.0), acfunsdk (0.8.3) +128 more potentially affected by CVE-2024-28397 via js2py (>=0.50.0, <=0.74.0)
js2py PYPI version =0.50.0, =1.0.9, =1.3.93, =3.4.0, =2.51.0, =0.0.1, =0.1.5, =0.1.1, =0.2.2, =0.72.2, =0.0.8, =0.0.10 and more Source cves: CVE-2024-28397 Source advisory: OSV:GHSA-H95X-26F3-88HR...
js2py allows remote code execution
An issue in the component js2py.disablepyimport of js2py up to v0.74 allows attackers to execute arbitrary code via a crafted API call...
CVE-2024-28397
An issue in the component js2py.disablepyimport of js2py up to v0.74 allows attackers to execute arbitrary code via a crafted API call...
UBUNTU-CVE-2024-28397
An issue in the component js2py.disablepyimport of js2py up to v0.74 allows attackers to execute arbitrary code via a crafted API call...
CVE-2024-28397
An issue in the component js2py.disablepyimport of js2py up to v0.74 allows attackers to execute arbitrary code via a crafted API call...
CVE-2024-28397
An issue in the component js2py.disablepyimport of js2py up to v0.74 allows attackers to execute arbitrary code via a crafted API call...
CVE-2024-28397
An issue in the component js2py.disablepyimport of js2py up to v0.74 allows attackers to execute arbitrary code via a crafted API call...
CVE-2024-28397
An issue in the component js2py.disablepyimport of js2py up to v0.74 allows attackers to execute arbitrary code via a crafted API call...
CVE-2024-28397: Improper Control of Generation of Code
An issue in the component js2py.disablepyimport of js2py up to v0.74 allows attackers to execute arbitrary code via a crafted API call...
Js2Py security vulnerabilities
Js2Py is a library from the Python Foundation. It is used to convert JavaScript to Python code. A code execution vulnerability exists in Js2Py version 0.74 and earlier, which can be exploited by an attacker to execute arbitrary code via a crafted API call...
CVE-2024-28397
An issue in the component js2py.disablepyimport of js2py up to v0.74 allows attackers to execute arbitrary code via a crafted API call...
