Read the docs

fgmacedo

Records1All Threatist records
Exploited (KEV)0None in CISA KEV
CVSS critical1CVSS 9.0–10.0
CVSS high0CVSS 7.0–8.9

Exploited now

fgmacedo records in CISA KEV

No fgmacedo vulnerabilities are listed in CISA KEV.

Components

Products in the NVD configurations · select one to filter the records
Python Statemachine 1 record HIGH

Records

1 record in Python Statemachine · all components

TI-2026-34702 CVE-2026-47103 · GHSA-v4jc-pm6r-3vj8

Python StateMachine 3.0.0 < 3.2.0 RCE via SCXML eval() Injection

Priority HIGH 81

Python StateMachine versions 3.0.0 before 3.2.0 contains a remote code execution vulnerability that allows attackers to execute arbitrary code by supplying malicious SCXML documents containing crafted `<data expr="...">`…

CVSS 4.0CRITICAL 9.3 Network No auth No interaction EPSS 0.01363 Published 2026-06-17 Fixed in 3.2.0 CWE-95
Open these records in search →