CVE-2024-53924

The Pycel Python library (versions through 1.0b30 ) contains a code execution vulnerability when processing untrusted Excel spreadsheets. The root cause is that Python-native functions , which are normally blocked, can be executed via specially crafted Excel formulas. Specifically, the eval funct...