python-dbusmock before version 0.15.1 AddTemplate() D-Bus method call or DBusTestCase.spawn_server_template() method could be tricked into executing malicious code if an attacker supplies a .pyc file.
CVSS 3.0HIGH 8.8·Network·No auth·User interaction·EPSS 0.01824·Published 2019-04-22·Fixed in 0.15.1CWE-20