Debian/python-asteval: high 8.4
ASTEVAL is an evaluator of Python expressions and statements. Prior to version 1.0.6, if an attacker can control the input to the `asteval` library, they can bypass asteval's restrictions and execute
Action: Upgrade python-asteval to 1.0.6-2 or later.
Affected
| introduced | fixed | last affected |
|---|---|---|
| 0 | 1.0.6-2 | - |
Fixed versions
| 1.0.6-2 |
Sources
- osv: DEBIAN-CVE-2025-24359#Debian:13/python-asteval
- https://security-tracker.debian.org/tracker/CVE-2025-24359
published · modified · JSON