Most recent entries from all https://cve.radiocsirt.org Contains only the most 10 recent entries. http://www.rssboard.org/rss-specification python-feedgen en Thu, 08 Oct 2026 19:07:28 +0000 EUVD-2026-360188 https://cve.radiocsirt.org/vuln/euvd-2026-360188 EUVD-2026-360188 https://cve.radiocsirt.org/vuln/euvd-2026-360188 fkie_cve-2026-75062 https://cve.radiocsirt.org/vuln/fkie_cve-2026-75062 <p>Improper Neutralization of Directives in Dynamically Evaluated Code (&#39;Eval Injection&#39;) in the default lf.query Python protocol in Google langfun versions prior to 0.1.2 allows remote unauthenticated attackers to execute arbitrary Python code in the context of the host application via crafted prompt inputs that cause the model to generate executable Python expressions evaluated without a sandbox.</p> <p>Improper Neutralization of Directives in Dynamically Evaluated Code (&#39;Eval Injection&#39;) in the default lf.query Python protocol in Google langfun versions prior to 0.1.2 allows remote unauthenticated attackers to execute arbitrary Python code in the context of the host application via crafted prompt inputs that cause the model to generate executable Python expressions evaluated without a sandbox.</p> https://cve.radiocsirt.org/vuln/fkie_cve-2026-75062 GHSA-8x83-862f-c85r https://cve.radiocsirt.org/vuln/ghsa-8x83-862f-c85r <p>Improper Neutralization of Directives in Dynamically Evaluated Code (&#39;Eval Injection&#39;) in the default lf.query Python protocol in Google langfun versions prior to 0.1.2 allows remote unauthenticated attackers to execute arbitrary Python code in the context of the host application via crafted prompt inputs that cause the model to generate executable Python expressions evaluated without a sandbox.</p> <p>Improper Neutralization of Directives in Dynamically Evaluated Code (&#39;Eval Injection&#39;) in the default lf.query Python protocol in Google langfun versions prior to 0.1.2 allows remote unauthenticated attackers to execute arbitrary Python code in the context of the host application via crafted prompt inputs that cause the model to generate executable Python expressions evaluated without a sandbox.</p> https://cve.radiocsirt.org/vuln/ghsa-8x83-862f-c85r