Code Injection

qiskit_ibm_runtime is vulnerable to Code Injection. The vulnerability is due to the presence of the eval method within the Options.get_program_inputs function, which allows an attacker to inject and execute arbitrary code within the application’s context.