2 matches found
CVE-2026-32640
SimpleEval is a library for adding evaluatable expressions into python projects. Prior to 1.0.5, objects including modules can leak dangerous modules through to direct access inside the sandbox. If the objects you've passed in as names to SimpleEval have modules or other disallowed / dangerous...
9.8CVSS7.7AI score0.00544EPSS
SaveExploits0References12
CVE-2024-27602
Alldata version V0.4.6 is affected by an Incorrect Access Control vulnerability that leads to the leakage of interface documents for multiple modules. Specifically, the /api/system/v2/api-docs module is exposed, potentially revealing sensitive internal technical details. To minimize risk, it is r...
9.1CVSS5.8AI score0.00443EPSS
SaveExploits0References1Affected Software1
20