https://cve.radiocsirt.org Contains only the most 10 recent entries. http://www.rssboard.org/rss-specification python-feedgen en Wed, 07 Oct 2026 20:20:50 +0000 https://cve.radiocsirt.org/vuln/brew-checkov-cve-2025-24359 <p><strong>Affected:</strong> Homebrew: checkov</p> <p>### Summary If an attacker can control the input to the `asteval` library, they can bypass asteval&#39;s restrictions and execute arbitrary Python code in the context of the application using the library.</p> <p>### Details The vulnerability is rooted in how `asteval` performs handling of `FormattedValue` AST nodes. In particular, the [`on_formattedvalue`](https://github.com/lmfit/asteval/blob/cfb57f0beebe0dc0520a1fbabc35e66060c7ea71/asteval/asteval.py#L507) value uses the [dangerous format method of the str class](https://lucumr.pocoo.org/2016/12/29/careful-with-str-format/), as shown in the vulnerable code snippet below:</p> <p>```py def on_formattedvalue(self, node): # (&#39;value&#39;, &#39;conversion&#39;, &#39;format_spec&#39;) &#34;formatting used in f-strings&#34; val = self.run(node.value) fstring_converters = {115: str, 114: repr, 97: ascii} if node.conversion in fstring_converters: val = fstring_converters[node.conversion](val) fmt = &#39;{__fstring__}&#39; if node.format_spec is not None: fmt = f&#39;{{__fstring__:{self.run(node.format_spec)}}}&#39; return fmt.format(__fstring__=val) ```</p> <p>The code above allows an attacker to manipulate the value of the string used in the dangerous call `fmt.format(__fstring__=val)`. This vulnerability can be exploited to access protected attributes by intentionally triggering an `AttributeError` exception. The attacker can then catch the exception and use its `obj` attribute to gain arbitrary access to sensiti…</p> <p><strong>Affected:</strong> Homebrew: checkov</p> <p>### Summary If an attacker can control the input to the `asteval` library, they can bypass asteval&#39;s restrictions and execute arbitrary Python code in the context of the application using the library.</p> <p>### Details The vulnerability is rooted in how `asteval` performs handling of `FormattedValue` AST nodes. In particular, the [`on_formattedvalue`](https://github.com/lmfit/asteval/blob/cfb57f0beebe0dc0520a1fbabc35e66060c7ea71/asteval/asteval.py#L507) value uses the [dangerous format method of the str class](https://lucumr.pocoo.org/2016/12/29/careful-with-str-format/), as shown in the vulnerable code snippet below:</p> <p>```py def on_formattedvalue(self, node): # (&#39;value&#39;, &#39;conversion&#39;, &#39;format_spec&#39;) &#34;formatting used in f-strings&#34; val = self.run(node.value) fstring_converters = {115: str, 114: repr, 97: ascii} if node.conversion in fstring_converters: val = fstring_converters[node.conversion](val) fmt = &#39;{__fstring__}&#39; if node.format_spec is not None: fmt = f&#39;{{__fstring__:{self.run(node.format_spec)}}}&#39; return fmt.format(__fstring__=val) ```</p> <p>The code above allows an attacker to manipulate the value of the string used in the dangerous call `fmt.format(__fstring__=val)`. This vulnerability can be exploited to access protected attributes by intentionally triggering an `AttributeError` exception. The attacker can then catch the exception and use its `obj` attribute to gain arbitrary access to sensiti…</p> https://cve.radiocsirt.org/vuln/brew-checkov-cve-2025-24359 https://cve.radiocsirt.org/vuln/euvd-2026-215186 EUVD-2026-215186 https://cve.radiocsirt.org/vuln/euvd-2026-215186 https://cve.radiocsirt.org/vuln/fkie_cve-2025-24359 <p>ASTEVAL is an evaluator of Python expressions and statements. Prior to version 1.0.6, if an attacker can control the input to the `asteval` library, they can bypass asteval&#39;s restrictions and execute arbitrary Python code in the context of the application using the library. The vulnerability is rooted in how `asteval` performs handling of `FormattedValue` AST nodes. In particular, the `on_formattedvalue` value uses the dangerous format method of the str class. The code allows an attacker to manipulate the value of the string used in the dangerous call `fmt.format(__fstring__=val)`. This vulnerability can be exploited to access protected attributes by intentionally triggering an `AttributeError` exception. The attacker can then catch the exception and use its `obj` attribute to gain arbitrary access to sensitive or protected object properties. Version 1.0.6 fixes this issue.</p> <p>ASTEVAL is an evaluator of Python expressions and statements. Prior to version 1.0.6, if an attacker can control the input to the `asteval` library, they can bypass asteval&#39;s restrictions and execute arbitrary Python code in the context of the application using the library. The vulnerability is rooted in how `asteval` performs handling of `FormattedValue` AST nodes. In particular, the `on_formattedvalue` value uses the dangerous format method of the str class. The code allows an attacker to manipulate the value of the string used in the dangerous call `fmt.format(__fstring__=val)`. This vulnerability can be exploited to access protected attributes by intentionally triggering an `AttributeError` exception. The attacker can then catch the exception and use its `obj` attribute to gain arbitrary access to sensitive or protected object properties. Version 1.0.6 fixes this issue.</p> https://cve.radiocsirt.org/vuln/fkie_cve-2025-24359 https://cve.radiocsirt.org/vuln/ghsa-3wwr-3g9f-9gc7 <p><strong>Affected:</strong> PyPI: asteval</p> <p>### Summary If an attacker can control the input to the `asteval` library, they can bypass asteval&#39;s restrictions and execute arbitrary Python code in the context of the application using the library.</p> <p>### Details The vulnerability is rooted in how `asteval` performs handling of `FormattedValue` AST nodes. In particular, the [`on_formattedvalue`](https://github.com/lmfit/asteval/blob/cfb57f0beebe0dc0520a1fbabc35e66060c7ea71/asteval/asteval.py#L507) value uses the [dangerous format method of the str class](https://lucumr.pocoo.org/2016/12/29/careful-with-str-format/), as shown in the vulnerable code snippet below:</p> <p>```py def on_formattedvalue(self, node): # (&#39;value&#39;, &#39;conversion&#39;, &#39;format_spec&#39;) &#34;formatting used in f-strings&#34; val = self.run(node.value) fstring_converters = {115: str, 114: repr, 97: ascii} if node.conversion in fstring_converters: val = fstring_converters[node.conversion](val) fmt = &#39;{__fstring__}&#39; if node.format_spec is not None: fmt = f&#39;{{__fstring__:{self.run(node.format_spec)}}}&#39; return fmt.format(__fstring__=val) ```</p> <p>The code above allows an attacker to manipulate the value of the string used in the dangerous call `fmt.format(__fstring__=val)`. This vulnerability can be exploited to access protected attributes by intentionally triggering an `AttributeError` exception. The attacker can then catch the exception and use its `obj` attribute to gain arbitrary access to sensiti…</p> <p><strong>Affected:</strong> PyPI: asteval</p> <p>### Summary If an attacker can control the input to the `asteval` library, they can bypass asteval&#39;s restrictions and execute arbitrary Python code in the context of the application using the library.</p> <p>### Details The vulnerability is rooted in how `asteval` performs handling of `FormattedValue` AST nodes. In particular, the [`on_formattedvalue`](https://github.com/lmfit/asteval/blob/cfb57f0beebe0dc0520a1fbabc35e66060c7ea71/asteval/asteval.py#L507) value uses the [dangerous format method of the str class](https://lucumr.pocoo.org/2016/12/29/careful-with-str-format/), as shown in the vulnerable code snippet below:</p> <p>```py def on_formattedvalue(self, node): # (&#39;value&#39;, &#39;conversion&#39;, &#39;format_spec&#39;) &#34;formatting used in f-strings&#34; val = self.run(node.value) fstring_converters = {115: str, 114: repr, 97: ascii} if node.conversion in fstring_converters: val = fstring_converters[node.conversion](val) fmt = &#39;{__fstring__}&#39; if node.format_spec is not None: fmt = f&#39;{{__fstring__:{self.run(node.format_spec)}}}&#39; return fmt.format(__fstring__=val) ```</p> <p>The code above allows an attacker to manipulate the value of the string used in the dangerous call `fmt.format(__fstring__=val)`. This vulnerability can be exploited to access protected attributes by intentionally triggering an `AttributeError` exception. The attacker can then catch the exception and use its `obj` attribute to gain arbitrary access to sensiti…</p> https://cve.radiocsirt.org/vuln/ghsa-3wwr-3g9f-9gc7 https://cve.radiocsirt.org/vuln/oesa-2025-1297 <p><strong>Affected:</strong> openEuler:24.03-LTS-SP1: python-asteval</p> <p>ASTEVAL provides a numpy-aware, safe(ish) &amp;amp;apos;eval&amp;amp;apos; function Emphasis is on mathematical expressions, and so numpy ufuncs are used if available. Symbols are held in the Interpreter symbol table &amp;amp;apos;symtable&amp;amp;apos;: a simple dictionary supporting a simple, flat namespace. Expressions can be compiled into ast node for later evaluation, using the values in the symbol table current at evaluation time. Security Fix(es):</p> <p>ASTEVAL is an evaluator of Python expressions and statements. Prior to version 1.0.6, if an attacker can control the input to the `asteval` library, they can bypass asteval&amp;apos;s restrictions and execute arbitrary Python code in the context of the application using the library. The vulnerability is rooted in how `asteval` performs handling of `FormattedValue` AST nodes. In particular, the `on_formattedvalue` value uses the dangerous format method of the str class. The code allows an attacker to manipulate the value of the string used in the dangerous call `fmt.format(__fstring__=val)`. This vulnerability can be exploited to access protected attributes by intentionally triggering an `AttributeError` exception. The attacker can then catch the exception and use its `obj` attribute to gain arbitrary access to sensitive or protected object properties. Version 1.0.6 fixes this issue.(CVE-2025-24359)</p> <p><strong>Affected:</strong> openEuler:24.03-LTS-SP1: python-asteval</p> <p>ASTEVAL provides a numpy-aware, safe(ish) &amp;amp;apos;eval&amp;amp;apos; function Emphasis is on mathematical expressions, and so numpy ufuncs are used if available. Symbols are held in the Interpreter symbol table &amp;amp;apos;symtable&amp;amp;apos;: a simple dictionary supporting a simple, flat namespace. Expressions can be compiled into ast node for later evaluation, using the values in the symbol table current at evaluation time. Security Fix(es):</p> <p>ASTEVAL is an evaluator of Python expressions and statements. Prior to version 1.0.6, if an attacker can control the input to the `asteval` library, they can bypass asteval&amp;apos;s restrictions and execute arbitrary Python code in the context of the application using the library. The vulnerability is rooted in how `asteval` performs handling of `FormattedValue` AST nodes. In particular, the `on_formattedvalue` value uses the dangerous format method of the str class. The code allows an attacker to manipulate the value of the string used in the dangerous call `fmt.format(__fstring__=val)`. This vulnerability can be exploited to access protected attributes by intentionally triggering an `AttributeError` exception. The attacker can then catch the exception and use its `obj` attribute to gain arbitrary access to sensitive or protected object properties. Version 1.0.6 fixes this issue.(CVE-2025-24359)</p> https://cve.radiocsirt.org/vuln/oesa-2025-1297 https://cve.radiocsirt.org/vuln/opensuse-su-2025:0052-1 <p>Security update for python-asteval</p> <p>Security update for python-asteval</p> https://cve.radiocsirt.org/vuln/opensuse-su-2025:0052-1 https://cve.radiocsirt.org/vuln/pysec-2026-1195 <p><strong>Affected:</strong> PyPI: asteval</p> <p>### Summary If an attacker can control the input to the `asteval` library, they can bypass asteval&#39;s restrictions and execute arbitrary Python code in the context of the application using the library.</p> <p>### Details The vulnerability is rooted in how `asteval` performs handling of `FormattedValue` AST nodes. In particular, the [`on_formattedvalue`](https://github.com/lmfit/asteval/blob/cfb57f0beebe0dc0520a1fbabc35e66060c7ea71/asteval/asteval.py#L507) value uses the [dangerous format method of the str class](https://lucumr.pocoo.org/2016/12/29/careful-with-str-format/), as shown in the vulnerable code snippet below:</p> <p>```py def on_formattedvalue(self, node): # (&#39;value&#39;, &#39;conversion&#39;, &#39;format_spec&#39;) &#34;formatting used in f-strings&#34; val = self.run(node.value) fstring_converters = {115: str, 114: repr, 97: ascii} if node.conversion in fstring_converters: val = fstring_converters[node.conversion](val) fmt = &#39;{__fstring__}&#39; if node.format_spec is not None: fmt = f&#39;{{__fstring__:{self.run(node.format_spec)}}}&#39; return fmt.format(__fstring__=val) ```</p> <p>The code above allows an attacker to manipulate the value of the string used in the dangerous call `fmt.format(__fstring__=val)`. This vulnerability can be exploited to access protected attributes by intentionally triggering an `AttributeError` exception. The attacker can then catch the exception and use its `obj` attribute to gain arbitrary access to sensiti…</p> <p><strong>Affected:</strong> PyPI: asteval</p> <p>### Summary If an attacker can control the input to the `asteval` library, they can bypass asteval&#39;s restrictions and execute arbitrary Python code in the context of the application using the library.</p> <p>### Details The vulnerability is rooted in how `asteval` performs handling of `FormattedValue` AST nodes. In particular, the [`on_formattedvalue`](https://github.com/lmfit/asteval/blob/cfb57f0beebe0dc0520a1fbabc35e66060c7ea71/asteval/asteval.py#L507) value uses the [dangerous format method of the str class](https://lucumr.pocoo.org/2016/12/29/careful-with-str-format/), as shown in the vulnerable code snippet below:</p> <p>```py def on_formattedvalue(self, node): # (&#39;value&#39;, &#39;conversion&#39;, &#39;format_spec&#39;) &#34;formatting used in f-strings&#34; val = self.run(node.value) fstring_converters = {115: str, 114: repr, 97: ascii} if node.conversion in fstring_converters: val = fstring_converters[node.conversion](val) fmt = &#39;{__fstring__}&#39; if node.format_spec is not None: fmt = f&#39;{{__fstring__:{self.run(node.format_spec)}}}&#39; return fmt.format(__fstring__=val) ```</p> <p>The code above allows an attacker to manipulate the value of the string used in the dangerous call `fmt.format(__fstring__=val)`. This vulnerability can be exploited to access protected attributes by intentionally triggering an `AttributeError` exception. The attacker can then catch the exception and use its `obj` attribute to gain arbitrary access to sensiti…</p> https://cve.radiocsirt.org/vuln/pysec-2026-1195 https://cve.radiocsirt.org/vuln/ubuntu-cve-2025-24359 <p><strong>Affected:</strong> Ubuntu:20.04:LTS: python-asteval, Ubuntu:22.04:LTS: python-asteval, Ubuntu:24.04:LTS: python-asteval</p> <p>ASTEVAL is an evaluator of Python expressions and statements. Prior to version 1.0.6, if an attacker can control the input to the `asteval` library, they can bypass asteval&#39;s restrictions and execute arbitrary Python code in the context of the application using the library. The vulnerability is rooted in how `asteval` performs handling of `FormattedValue` AST nodes. In particular, the `on_formattedvalue` value uses the dangerous format method of the str class. The code allows an attacker to manipulate the value of the string used in the dangerous call `fmt.format(__fstring__=val)`. This vulnerability can be exploited to access protected attributes by intentionally triggering an `AttributeError` exception. The attacker can then catch the exception and use its `obj` attribute to gain arbitrary access to sensitive or protected object properties. Version 1.0.6 fixes this issue.</p> <p><strong>Affected:</strong> Ubuntu:20.04:LTS: python-asteval, Ubuntu:22.04:LTS: python-asteval, Ubuntu:24.04:LTS: python-asteval</p> <p>ASTEVAL is an evaluator of Python expressions and statements. Prior to version 1.0.6, if an attacker can control the input to the `asteval` library, they can bypass asteval&#39;s restrictions and execute arbitrary Python code in the context of the application using the library. The vulnerability is rooted in how `asteval` performs handling of `FormattedValue` AST nodes. In particular, the `on_formattedvalue` value uses the dangerous format method of the str class. The code allows an attacker to manipulate the value of the string used in the dangerous call `fmt.format(__fstring__=val)`. This vulnerability can be exploited to access protected attributes by intentionally triggering an `AttributeError` exception. The attacker can then catch the exception and use its `obj` attribute to gain arbitrary access to sensitive or protected object properties. Version 1.0.6 fixes this issue.</p> https://cve.radiocsirt.org/vuln/ubuntu-cve-2025-24359