Lucene search
+L

2 matches found

Github Security Blog
Github Security Blog
added 2026/03/13 8:56 p.m.14 views

SimpleEval: Objects (including modules) can leak dangerous modules through to direct access inside the sandbox

Impact If the objects passed in as names to SimpleEval have modules or other disallowed / dangerous objects available as attrs. Additionally, dangerous functions or modules could be accessed by passing them as callbacks to other safe functions to call. Examples found by @ByamB4: Any module where...

9.8CVSS5.8AI score0.00524EPSS
SaveExploits0References6Affected Software1
Rows per page
Query Builder