CVE-2024-53924

The Pycel library (versions through 1.0b30 ) is vulnerable to arbitrary code execution when processing untrusted spreadsheets. The root cause is a bypass in the symbolic safe evaluation of Excel formulas, where specially crafted formulas—such as those using =IF(A1=200, eval("__import__('os').syst...