https://cve.radiocsirt.org/rss/recent/all/10 Most recent entries from all 2026-10-08T16:04:38.127466+00:00 Vulnerability-Lookup csirt@opendfir.org python-feedgen Contains only the most 10 recent entries. https://cve.radiocsirt.org/vuln/euvd-2026-360188 EUVD-2026-360188 2026-10-08T16:04:38.198082+00:00 EUVD-2026-360188 https://cve.radiocsirt.org/vuln/fkie_cve-2026-75062 fkie_cve-2026-75062 2026-10-08T16:04:38.198129+00:00

Improper Neutralization of Directives in Dynamically Evaluated Code ('Eval Injection') in the default lf.query Python protocol in Google langfun versions prior to 0.1.2 allows remote unauthenticated attackers to execute arbitrary Python code in the context of the host application via crafted prompt inputs that cause the model to generate executable Python expressions evaluated without a sandbox.

 https://cve.radiocsirt.org/vuln/ghsa-8x83-862f-c85r GHSA-8x83-862f-c85r 2026-10-08T16:04:38.198169+00:00

Improper Neutralization of Directives in Dynamically Evaluated Code ('Eval Injection') in the default lf.query Python protocol in Google langfun versions prior to 0.1.2 allows remote unauthenticated attackers to execute arbitrary Python code in the context of the host application via crafted prompt inputs that cause the model to generate executable Python expressions evaluated without a sandbox.