Lmfit vulnerabilities
We track 1 vulnerability in Lmfit products. 1 is rated high or critical, and none are known to be exploited. The most recent was published on January 24, 2025.
1vulnerabilities
0critical
1high
0exploited
8.4average CVSS score
Latest Lmfit vulnerabilities
- 8.4 High severity
asteval: Use of Externally-Controlled Format String
ASTEVAL is an evaluator of Python expressions and statements. Prior to version 1.0.6, if an attacker can control the input to the `asteval` library, they can bypass asteval's restrictions and execute arbitrary Python code in the context of the application usin