Debian/simpleeval: critical 9.8
SimpleEval is a library for adding evaluatable expressions into python projects. Prior to 1.0.5, objects (including modules) can leak dangerous modules through to direct access inside the sandbox. If
Action: Upgrade simpleeval to 0.9.12-1+deb12u1 or later.
Affected
| introduced | fixed | last affected |
|---|---|---|
| 0 | 0.9.12-1+deb12u1 | - |
Fixed versions
| 0.9.12-1+deb12u1 |
Sources
published · modified · JSON