https://cve.radiocsirt.org Contains only the most 10 recent entries. http://www.rssboard.org/rss-specification python-feedgen en Wed, 07 Oct 2026 20:20:47 +0000 https://cve.radiocsirt.org/vuln/brew-checkov-cve-2025-24359 <p><strong>Affected:</strong> Homebrew: checkov</p> <p>### Summary If an attacker can control the input to the `asteval` library, they can bypass asteval&#39;s restrictions and execute arbitrary Python code in the context of the application using the library.</p> <p>### Details The vulnerability is rooted in how `asteval` performs handling of `FormattedValue` AST nodes. In particular, the [`on_formattedvalue`](https://github.com/lmfit/asteval/blob/cfb57f0beebe0dc0520a1fbabc35e66060c7ea71/asteval/asteval.py#L507) value uses the [dangerous format method of the str class](https://lucumr.pocoo.org/2016/12/29/careful-with-str-format/), as shown in the vulnerable code snippet below:</p> <p>```py def on_formattedvalue(self, node): # (&#39;value&#39;, &#39;conversion&#39;, &#39;format_spec&#39;) &#34;formatting used in f-strings&#34; val = self.run(node.value) fstring_converters = {115: str, 114: repr, 97: ascii} if node.conversion in fstring_converters: val = fstring_converters[node.conversion](val) fmt = &#39;{__fstring__}&#39; if node.format_spec is not None: fmt = f&#39;{{__fstring__:{self.run(node.format_spec)}}}&#39; return fmt.format(__fstring__=val) ```</p> <p>The code above allows an attacker to manipulate the value of the string used in the dangerous call `fmt.format(__fstring__=val)`. This vulnerability can be exploited to access protected attributes by intentionally triggering an `AttributeError` exception. The attacker can then catch the exception and use its `obj` attribute to gain arbitrary access to sensiti…</p> <p><strong>Affected:</strong> Homebrew: checkov</p> <p>### Summary If an attacker can control the input to the `asteval` library, they can bypass asteval&#39;s restrictions and execute arbitrary Python code in the context of the application using the library.</p> <p>### Details The vulnerability is rooted in how `asteval` performs handling of `FormattedValue` AST nodes. In particular, the [`on_formattedvalue`](https://github.com/lmfit/asteval/blob/cfb57f0beebe0dc0520a1fbabc35e66060c7ea71/asteval/asteval.py#L507) value uses the [dangerous format method of the str class](https://lucumr.pocoo.org/2016/12/29/careful-with-str-format/), as shown in the vulnerable code snippet below:</p> <p>```py def on_formattedvalue(self, node): # (&#39;value&#39;, &#39;conversion&#39;, &#39;format_spec&#39;) &#34;formatting used in f-strings&#34; val = self.run(node.value) fstring_converters = {115: str, 114: repr, 97: ascii} if node.conversion in fstring_converters: val = fstring_converters[node.conversion](val) fmt = &#39;{__fstring__}&#39; if node.format_spec is not None: fmt = f&#39;{{__fstring__:{self.run(node.format_spec)}}}&#39; return fmt.format(__fstring__=val) ```</p> <p>The code above allows an attacker to manipulate the value of the string used in the dangerous call `fmt.format(__fstring__=val)`. This vulnerability can be exploited to access protected attributes by intentionally triggering an `AttributeError` exception. The attacker can then catch the exception and use its `obj` attribute to gain arbitrary access to sensiti…</p> https://cve.radiocsirt.org/vuln/brew-checkov-cve-2025-24359 https://cve.radiocsirt.org/vuln/cve-2025-24359 <p><strong>Affected:</strong> lmfit asteval</p> <p>ASTEVAL is an evaluator of Python expressions and statements. Prior to version 1.0.6, if an attacker can control the input to the `asteval` library, they can bypass asteval&#39;s restrictions and execute arbitrary Python code in the context of the application using the library. The vulnerability is rooted in how `asteval` performs handling of `FormattedValue` AST nodes. In particular, the `on_formattedvalue` value uses the dangerous format method of the str class. The code allows an attacker to manipulate the value of the string used in the dangerous call `fmt.format(__fstring__=val)`. This vulnerability can be exploited to access protected attributes by intentionally triggering an `AttributeError` exception. The attacker can then catch the exception and use its `obj` attribute to gain arbitrary access to sensitive or protected object properties. Version 1.0.6 fixes this issue.</p> <p><strong>Affected:</strong> lmfit asteval</p> <p>ASTEVAL is an evaluator of Python expressions and statements. Prior to version 1.0.6, if an attacker can control the input to the `asteval` library, they can bypass asteval&#39;s restrictions and execute arbitrary Python code in the context of the application using the library. The vulnerability is rooted in how `asteval` performs handling of `FormattedValue` AST nodes. In particular, the `on_formattedvalue` value uses the dangerous format method of the str class. The code allows an attacker to manipulate the value of the string used in the dangerous call `fmt.format(__fstring__=val)`. This vulnerability can be exploited to access protected attributes by intentionally triggering an `AttributeError` exception. The attacker can then catch the exception and use its `obj` attribute to gain arbitrary access to sensitive or protected object properties. Version 1.0.6 fixes this issue.</p> https://cve.radiocsirt.org/vuln/cve-2025-24359 https://cve.radiocsirt.org/vuln/ghsa-3wwr-3g9f-9gc7 <p><strong>Affected:</strong> PyPI: asteval</p> <p>### Summary If an attacker can control the input to the `asteval` library, they can bypass asteval&#39;s restrictions and execute arbitrary Python code in the context of the application using the library.</p> <p>### Details The vulnerability is rooted in how `asteval` performs handling of `FormattedValue` AST nodes. In particular, the [`on_formattedvalue`](https://github.com/lmfit/asteval/blob/cfb57f0beebe0dc0520a1fbabc35e66060c7ea71/asteval/asteval.py#L507) value uses the [dangerous format method of the str class](https://lucumr.pocoo.org/2016/12/29/careful-with-str-format/), as shown in the vulnerable code snippet below:</p> <p>```py def on_formattedvalue(self, node): # (&#39;value&#39;, &#39;conversion&#39;, &#39;format_spec&#39;) &#34;formatting used in f-strings&#34; val = self.run(node.value) fstring_converters = {115: str, 114: repr, 97: ascii} if node.conversion in fstring_converters: val = fstring_converters[node.conversion](val) fmt = &#39;{__fstring__}&#39; if node.format_spec is not None: fmt = f&#39;{{__fstring__:{self.run(node.format_spec)}}}&#39; return fmt.format(__fstring__=val) ```</p> <p>The code above allows an attacker to manipulate the value of the string used in the dangerous call `fmt.format(__fstring__=val)`. This vulnerability can be exploited to access protected attributes by intentionally triggering an `AttributeError` exception. The attacker can then catch the exception and use its `obj` attribute to gain arbitrary access to sensiti…</p> <p><strong>Affected:</strong> PyPI: asteval</p> <p>### Summary If an attacker can control the input to the `asteval` library, they can bypass asteval&#39;s restrictions and execute arbitrary Python code in the context of the application using the library.</p> <p>### Details The vulnerability is rooted in how `asteval` performs handling of `FormattedValue` AST nodes. In particular, the [`on_formattedvalue`](https://github.com/lmfit/asteval/blob/cfb57f0beebe0dc0520a1fbabc35e66060c7ea71/asteval/asteval.py#L507) value uses the [dangerous format method of the str class](https://lucumr.pocoo.org/2016/12/29/careful-with-str-format/), as shown in the vulnerable code snippet below:</p> <p>```py def on_formattedvalue(self, node): # (&#39;value&#39;, &#39;conversion&#39;, &#39;format_spec&#39;) &#34;formatting used in f-strings&#34; val = self.run(node.value) fstring_converters = {115: str, 114: repr, 97: ascii} if node.conversion in fstring_converters: val = fstring_converters[node.conversion](val) fmt = &#39;{__fstring__}&#39; if node.format_spec is not None: fmt = f&#39;{{__fstring__:{self.run(node.format_spec)}}}&#39; return fmt.format(__fstring__=val) ```</p> <p>The code above allows an attacker to manipulate the value of the string used in the dangerous call `fmt.format(__fstring__=val)`. This vulnerability can be exploited to access protected attributes by intentionally triggering an `AttributeError` exception. The attacker can then catch the exception and use its `obj` attribute to gain arbitrary access to sensiti…</p> https://cve.radiocsirt.org/vuln/ghsa-3wwr-3g9f-9gc7