js2py allows remote code execution

An issue in the component js2py.disablepyimport of js2py up to v0.74 allows attackers to execute arbitrary code via a crafted API call...

Exploit for CVE-2024-28397

CVE-2024-28397-js2py-Sandbox-Escape js2py Vulnerability Ana...

Exploit for CVE-2024-28397

CVE-2024-28397 - js2py Sandbox Escape Description The CV...

PT-2024-4746

Name of the Vulnerable Software and Affected Versions js2py versions prior to 0.74 python-Js2Py versions prior to 0.74-3.1 openSUSE Tumbleweed pyload-ng versions less than or equal to 0.5.0b3.dev85 when used with Python 3.11 or below Description A sandbox escape issue exists in the js2py.disable...