asteval vulnerabilities
1 known vulnerability in asteval from Lmfit. 1 is rated high or critical. Each entry lists the affected versions and the release that fixes it, where the vendor has published one.
1vulnerabilities
0critical
1high
0exploited
8.4average CVSS score
Latest first
- 8.4 High severity
asteval: Use of Externally-Controlled Format String
ASTEVAL is an evaluator of Python expressions and statements. Prior to version 1.0.6, if an attacker can control the input to the `asteval` library, they can bypass asteval's restrictions and execute arbitrary Python code in the context of the application usin