Vulnerabilities

TI-2026-71827 CVE-2026-102734

Sandbox escape in asteval allows arbitrary process memory access

LOW 24

asteval is a Python expression evaluator designed for restricted execution.

CVSS 3.1MEDIUM 5.5 Local No auth User interaction EPSS 0.00126 Published 2026-10-13 Fixed in 1.0.9 CWE-693

TI-2026-39918 CVE-2026-55244 · GHSA-89v8-rhwq-hf77

MEDIUM 56

ASTEVAL is an evaluator of Python expressions and statements.

CVSS 3.1MEDIUM 5.0 Local Low privileges User interaction EPSS 0.00177 Published 2026-09-14 Fixed in 1.0.9 CWE-248

TI-2025-18102 CVE-2025-24359 · GHSA-3wwr-3g9f-9gc7

HIGH 72

ASTEVAL is an evaluator of Python expressions and statements.

CVSS 3.1HIGH 8.4 Local No auth No interaction EPSS 0.00278 Published 2025-01-24 Fixed in 1.0.6 CWE-134